Vulnerabilities

TI-2024-14381 CVE-2024-21658

Insufficient control of region value length in discourse-calendar

LOW 20

discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00362 Published 2024-08-30 Fixed in 66259cd CWE-400

TI-2023-23383 CVE-2023-43658

LOW 38

dicourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00591 Published 2023-10-16 Fixed in 97883109 CWE-79

TI-2022-13104 CVE-2022-31059

LOW 32

Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00769 Published 2022-06-14 Fixed in 1.0.1 CWE-79