CVE-2024-53994 – “Discourse Unpatched Chat Preference Vulnerability”

The following table lists the changes that have been made to the
CVE-2024-53994 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Feb. 04, 2025

    Action Type Old Value New Value
    Added Description Discourse is an open source platform for community discussion. In affected versions users who disable chat in preferences could still be reachable in some cases. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable the chat plugin within site settings.
    Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
    Added CWE CWE-281
    Added Reference https://github.com/discourse/discourse/security/advisories/GHSA-mrpw-gwj7-98r6
Share the Post:

Related Posts