discourse

Records329All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high65CVSS 7.0–8.9

Exploited now

discourse records in CISA KEV

No discourse vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Discourse Calendar · all components

TI-2023-23383 CVE-2023-43658

LOW 38

dicourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00591 Published 2023-10-16 Fixed in 97883109 CWE-79

TI-2022-13104 CVE-2022-31059

LOW 32

Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00769 Published 2022-06-14 Fixed in 1.0.1 CWE-79

TI-2024-14381 CVE-2024-21658

LOW 20

discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00362 Published 2024-08-30 Fixed in 66259cd21dc6a1b2139d9833f3f847d8013e6759 CWE-400