All vulnerabilities

Servers and applications

CVE-2023-22740

Discourse is an open source platform for community discussion. Versions prior to 3.1.0.beta1 (beta) (tests-passed) are vulnerable to Allocation of Resources Without Limits. Users can create chat drafts of an unlimited length, which can cause a denial of service by generating an excessive load on the server. Additionally, an unlimited number of drafts were loaded when loading the user. This issue…

Severity
Medium 6.5
Published
27 Jan 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
DiscourseServers and applications · cpe:a:discourse:discourse
  • Every version up to 3.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-22740
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-22740