VULNERABILITY INTELLIGENCE
CVE-2024-52794
CVSS score6.8 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2024-12-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
Description
Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched in the latest version of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Weakness classification
- security-advisories@github.com: CWE-79
Primary references
- security-advisories@github.com — Vendor Advisory