VULNERABILITY INTELLIGENCE

CVE-2024-53994

CVSS score4.3 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2025-02-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Discourse is an open source platform for community discussion. In affected versions users who disable chat in preferences could still be reachable in some cases. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable the chat plugin within site settings.

Weakness classification

  • CWE-281: Improper Preservation of Permissions

Primary references