CVE-2026-32113

MediumCVSS 6.1/10Last modified Jul 24, 2026

Description

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, the enter action in StaticController reads the sso_destination_url cookie and redirects to it with allow_other_host: true without validating the destination URL. While this cookie is normally set during legitimate DiscourseConnect Provider flows with cryptographically validated SSO payloads, cookies are client-controlled and can be set by attackers. This issue has been patched in versions 2026.1.3, 2026.2.2, and 2026.3.0.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

No affected versions have been published.

Timeline

Published
Mar 31, 2026
Last modified
Jul 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-321144.3Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, there is an Insecure Direct ObCVE-2026-321168.1Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another. From 0.21.0 to before 0.23.0, reCVE-2026-321175.4The grafanacubism-panel plugin allows use of cubism.js in Grafana. In 0.1.2 and earlier, the panel's zoom-link handler passes a dashboard-edCVE-2026-321189.0OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, stored cross-siteCVE-2026-321194.4OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, DOM-based stored CVE-2026-32125.4Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allows Cross-Site ScriptCVE-2026-321206.3OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an InsecuCVE-2026-321215.4OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, Stored XSS in prCVE-2026-321224.3OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, the Claim File TrCVE-2026-321236.5OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, sensitivity checkCVE-2026-321245.4OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, the dynamic code CVE-2026-321255.4OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, track/item names
CVE-2026-32113: Medium severity, CVSS 6.1 | Vulnix