UpHeron
All vulnerabilities

Servers and applications

CVE-2021-43850

Discourse is an open source platform for community discussion. In affected versions admins users can trigger a Denial of Service attack via the `/message-bus/_diagnostics` path. The impact of this vulnerability is greater on multisite Discourse instances (where multiple forums are served from a single application server) where any admin user on any of the forums are able to visit the…

Severity
Medium 6.8
Published
4 Jan 2022
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
2.7.12
Sources
NVD

Affected software

SoftwareAffected versions
DiscourseServers and applications · cpe:a:discourse:discourse
  • Version 2.8.0-beta9
  • Version 2.8.0-beta8
  • Version 2.8.0-beta7
  • Version 2.8.0-beta6
All 10 release lines
  • Every version before 2.7.12
  • Version 2.8.0-beta1
  • Version 2.8.0-beta2
  • Version 2.8.0-beta3
  • Version 2.8.0-beta4
  • Version 2.8.0-beta5
  • Version 2.8.0-beta6
  • Version 2.8.0-beta7
  • Version 2.8.0-beta8
  • Version 2.8.0-beta9

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-43850
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-43850