UpHeron
All vulnerabilities

Servers and applications

CVE-2021-41271

Discourse is a platform for community discussion. In affected versions a maliciously crafted request could cause an error response to be cached by intermediate proxies. This could cause a loss of confidentiality for some content. This issue is patched in the latest stable, beta and tests-passed versions of Discourse.

Severity
Medium 5.3
Published
15 Nov 2021
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
DiscourseServers and applications · cpe:a:discourse:discourse
  • Version 2.8.0-beta7
  • Version 2.8.0-beta6
  • Version 2.8.0-beta5
  • Version 2.8.0-beta4
All 8 release lines
  • Every version up to 2.7.9
  • Version 2.8.0-beta1
  • Version 2.8.0-beta2
  • Version 2.8.0-beta3
  • Version 2.8.0-beta4
  • Version 2.8.0-beta5
  • Version 2.8.0-beta6
  • Version 2.8.0-beta7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-41271
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-41271