discourse

Records329All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high65CVSS 7.0–8.9

Exploited now

discourse records in CISA KEV

No discourse vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Calendar · all components

TI-2024-17235 CVE-2024-26145

LOW 31

Discourse Calendar adds the ability to create a dynamic calendar in the first post of a topic on Discourse.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00393 Published 2024-02-21 No fix listed CWE-863

TI-2024-30374 CVE-2024-45303

LOW 27

Discourse Calendar plugin adds the ability to create a dynamic calendar in the first post of a topic to Discourse.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00256 Published 2024-09-12 Fixed in 0.5 CWE-79

TI-2022-20254 CVE-2022-41913

LOW 25

Discourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00425 Published 2022-11-14 Fixed in 0.3 CWE-200

TI-2024-16334 CVE-2024-24817

LOW 24

Discourse Calendar adds the ability to create a dynamic calendar in the first post of a topic on the open-source discussion platform Discourse.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00419 Published 2024-02-22 Fixed in 0.4 CWE-200