PT-2024-26391 · Discourse · Discourse

Ry0Tak · Published 2024-07-03 · Updated 2024-07-09 · CVE-2024-35227

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 3.2.3 on the stable branch Discourse versions prior to 3.3.0.beta3 on the tests-passed branch

Description The issue affects Discourse, an open-source discussion platform, where Oneboxing against a carefully crafted malicious URL can reduce the availability of a Discourse instance. This is due to improper input validation, posing risks to data integrity. There are no known workarounds available for this issue.

Recommendations For Discourse versions prior to 3.2.3 on the stable branch, update to version 3.2.3 or later. For Discourse versions prior to 3.3.0.beta3 on the tests-passed branch, update to version 3.3.0.beta3 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BIT-DISCOURSE-2024-35227

CVE-2024-35227

GHSA-664F-XWJW-752C

Affected Products

Discourse

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35227.json · Exploit
• https://github.com/discourse/discourse/commit/6ce5673d2c1a511b602e1b2ade6cdc898d14ab36 · Patch
• https://github.com/discourse/discourse/commit/10afe5fcf1ebf2e49cb80716d5e62e184c53519b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-35227 · Security Note
• https://osv.dev/vulnerability/CVE-2024-35227 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-discourse-2024-35227 · Vendor Advisory
• https://github.com/discourse/discourse/security/advisories/GHSA-664f-xwjw-752c · Note
• https://twitter.com/CVEnew/status/1808559150017704215 · Twitter Post
• https://twitter.com/Hossted_OSS/status/1810246371791745461 · Twitter Post
• https://twitter.com/cracbot/status/1810192160362508349 · Twitter Post