UpHeron
All vulnerabilities

Servers and applications

CVE-2023-22739

Discourse is an open source platform for community discussion. Versions prior to 3.0.1 (stable), 3.1.0.beta2 (beta), and 3.1.0.beta2 (tests-passed) are subject to Allocation of Resources Without Limits or Throttling. As there is no limit on data contained in a draft, a malicious user can create an arbitrarily large draft, forcing the instance to a crawl. This issue is patched in versions 3.0.1…

Severity
Medium 6.5
Published
26 Jan 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
3.0.1
Sources
NVD

Affected software

SoftwareAffected versions
DiscourseServers and applications · cpe:a:discourse:discourse
  • Every version before 3.0.1
  • Version 3.1.0-beta1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-22739
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-22739