CVE-2024-47773

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache is poisoned with a response without any preloaded data. This issue only affects anonymous visitors of the site. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable anonymous cache by setting the `DISCOURSE_DISABLE_ANON_CACHE` environment variable to a non-empty value.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Weakness enumeration

CWE-610

Affected software

No affected versions have been published.

Timeline

Published
Oct 8, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-477749.1GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_suCVE-2024-477759.1GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 funcCVE-2024-477769.1GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk withiCVE-2024-477779.1GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparCVE-2024-477787.5GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_aCVE-2024-477797.0Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which CVE-2024-47789.8Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort soCVE-2024-477804.3TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access iCVE-2024-477816.1CreateWiki is an extension used at Miraheze for requesting & creating wikis. The name of requested wikis is not escaped on Special:RequestWiCVE-2024-477825.4WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. Special:WikiDiscover is a special page that lCVE-2024-477837.8A vulnerability has been identified in SIPORT (All versions < V3.4.0). The affected application improperly assigns file permissions to instaCVE-2024-477842.6Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change fo