All vulnerabilities

Servers and applications

CVE-2023-45147

Discourse is an open source community platform. In affected versions any user can create a topic and add arbitrary custom fields to a topic. The severity of this vulnerability depends on what plugins are installed and how the plugins uses topic custom fields. For a default Discourse installation with the default plugins, this vulnerability has no impact. The problem has been patched in the…

Severity
Low 3.1
Published
16 Oct 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
DiscourseServers and applications · cpe:a:discourse:discourse
  • Every version up to 3.1.1
  • Version 3.2.0-beta1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-45147
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-45147