Servers and applications
CVE-2023-46130
Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, some theme components allow users to add svgs with unlimited `height` attributes, and this can affect the availability of subsequent replies in a topic. Most Discourse instances are unaffected, only instances with the…
- Severity
- Medium 5.4
- Published
- 10 Nov 2023
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 3.1.3, 3.2.0
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
DiscourseServers and applications · cpe:a:discourse:discourse |
|