0Xmokusou

**Name of the Vulnerable Software and Affected Versions** Discourse versions prior to 3.2.3 Discourse versions prior to 3.3.0.beta3 **Description** The issue arises from improperly sanitized Onebox data, which could lead to an XSS vulnerability in certain situations. This vulnerability only affects Discourse instances with the default Content Security Policy disabled. **Recommendations** For versions prior to 3.2.3, update to version 3.2.3 or later to resolve the issue. For versions prior to 3.3.0.beta3, update to version 3.3.0.beta3 or later to resolve the issue. As a temporary workaround, consider enabling the default Content Security Policy to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Discourse versions prior to 3.2.5 Discourse versions prior to 3.3.0.beta5 **Description** The issue allows an attacker to inject iframes from any domain, bypassing the intended restrictions enforced by the allowed iframes setting. **Recommendations** For versions prior to 3.2.5, update to version 3.2.5 or later. For versions prior to 3.3.0.beta5, update to version 3.3.0.beta5 or later.

**Name of the Vulnerable Software and Affected Versions** Discourse versions prior to 3.2.3 on the stable branch Discourse versions prior to 3.3.0.beta3 on the tests-passed branch **Description** The issue allows an attacker to execute arbitrary JavaScript on users' browsers by posting a specific URL containing maliciously crafted meta tags. This only affects sites with Content Security Policy (CSP) disabled. **Recommendations** For versions prior to 3.2.3 on the stable branch, update to version 3.2.3 or later. For versions prior to 3.3.0.beta3 on the tests-passed branch, update to version 3.3.0.beta3 or later. As a temporary workaround, ensure Content Security Policy (CSP) is enabled on the forum.

**Name of the Vulnerable Software and Affected Versions** Discourse versions prior to 3.2.3 on the stable branch Discourse versions prior to 3.3.0.beta4 on the beta and tests-passed branches **Description** Discourse is an open-source discussion platform. A malicious actor could get the FastImage library to redirect requests to an internal Discourse IP. **Recommendations** For Discourse versions prior to 3.2.3 on the stable branch, update to version 3.2.3 or later. For Discourse versions prior to 3.3.0.beta4 on the beta and tests-passed branches, update to version 3.3.0.beta4 or later.

**Name of the Vulnerable Software and Affected Versions** Discourse versions prior to 3.1.3 Discourse version 3.2.0.beta3 and earlier of the `beta` and `tests-passed` branches **Description** Discourse is an open source platform for community discussion. The issue allows some links to inject arbitrary HTML tags when rendered through the Onebox engine. There are no known workarounds. **Recommendations** For versions prior to 3.1.3, update to version 3.1.3 or later of the `stable` branch. For version 3.2.0.beta3 and earlier of the `beta` and `tests-passed` branches, update to version 3.2.0.beta3 or later.

**Name of the Vulnerable Software and Affected Versions** Discourse versions prior to the latest tests-passed, beta and stable branches **Description** This issue affects Discourse, an open source platform for community discussion. It is not exploitable on the default install of Discourse, requiring a custom feature to be enabled. The attacker's payload must also pass the Content Security Policy (CSP) to be executed. If successful, it could result in session hijacking for users who view the attacker's post. **Recommendations** For versions prior to the latest tests-passed, beta and stable branches, upgrade to the latest version. For users unable to upgrade, enable and/or restore the site's CSP to the default one provided with Discourse and remove any embed-able hosts configured.

**Name of the Vulnerable Software and Affected Versions** Discourse versions prior to 3.0.3 Discourse versions prior to 3.1.0.beta4 **Description** Discourse is an open source platform for community discussion. A maliciously crafted request from a Discourse administrator can lead to a long-running request and eventual timeout. This has the greatest potential impact in shared hosting environments where admins are untrusted. **Recommendations** For versions prior to 3.0.3, upgrade to version 3.0.3 or later. For versions prior to 3.1.0.beta4, upgrade to version 3.1.0.beta4 or later.