PT-2024-26398 · Discourse · Discourse

0Xmokusou · Published 2024-07-03 · Updated 2024-09-18 · CVE-2024-35234

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 3.2.3 on the stable branch Discourse versions prior to 3.3.0.beta3 on the tests-passed branch

Description The issue allows an attacker to execute arbitrary JavaScript on users' browsers by posting a specific URL containing maliciously crafted meta tags. This only affects sites with Content Security Policy (CSP) disabled.

Recommendations For versions prior to 3.2.3 on the stable branch, update to version 3.2.3 or later. For versions prior to 3.3.0.beta3 on the tests-passed branch, update to version 3.3.0.beta3 or later. As a temporary workaround, ensure Content Security Policy (CSP) is enabled on the forum.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BIT-DISCOURSE-2024-35234

CVE-2024-35234

GHSA-5CHG-HM8C-WC58

Affected Products

Discourse

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35234.json · Exploit
• https://github.com/discourse/discourse/commit/26aef0c288839378b9de5819e96eac8cf4ea60fd · Patch
• https://github.com/discourse/discourse/commit/311b737c910cf0a69f61e1b8bc0b78374b6619d2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-35234 · Security Note
• https://osv.dev/vulnerability/CVE-2024-35234 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-discourse-2024-35234 · Vendor Advisory
• https://github.com/discourse/discourse/security/advisories/GHSA-5chg-hm8c-wc58 · Note
• https://t.me/cvenotify/95089 · Telegram Post