All vulnerabilities

Servers and applications

CVE-2023-36818

Discourse is an open source discussion platform. In affected versions a request to create or update custom sidebar section can cause a denial of service. This issue has been patched in commit `52b003d915`. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Severity
High 7.5
Published
14 Jul 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
DiscourseServers and applications · cpe:a:discourse:discourse
  • Version 3.1.0-beta5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-36818
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-36818