Servers and applications
CVE-2023-36466
Discourse is an open source discussion platform. When editing a topic, there is a vulnerability that enables a user to bypass the topic title validations for things like title length, number of emojis in title and blank topic titles. The issue is patched in the latest stable, beta and tests-passed version of Discourse.
- Severity
- Medium 4.3
- Published
- 14 Jul 2023
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 3.0.5
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
DiscourseServers and applications · cpe:a:discourse:discourse |
All 210 release lines
|