Browse / Discourse

Discourse

See its reports on the map

What gets reported to Discourse

• Cross-site Scripting8
• Information Disclosure4
• Denial of Service2
• Cross-Site Request Forgery2
• Access Control2
• Other weaknesses1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Denial of Service (DoS) Vulnerability in Drafts Creation EndpointUncontrolled Resource Consumption · high
   $1,02498 votes
2. Account takeover at https://try.discourse.org due to no CSRF protection in connecting Yahoo accountCross-Site Request Forgery (CSRF) · high
   89 votes
3. Application Level DoS - Large Markdown Payload in Reply Section Leading to Resource ExhaustionUncontrolled Resource Consumption · high
   84 votes
4. Any user with invite capabilities can take-over any account on Discoursecritical
   $1,02475 votes
5. CSRF-tokens on pages without no-cache headers, resulting in ATO when using CloudFlare proxy (Web Cache Deception)Cross-Site Request Forgery (CSRF) · low
   58 votes
6. Arbitrary Local-File Read from Admin - Restore From Backup due to SymlinksInformation Disclosure · high
   $51252 votes
7. Web Cache Deception Attack (XSS)Cross-site Scripting (XSS) - Stored · high
   $25651 votes
8. Admin Command Injection via username in user_archive ExportCsvFileCommand Injection - Generic · high
   $51245 votes
9. SSRF in upload IMG through URLInformation Disclosure · low
   $6432 votes
10. Hidden/restricted tags can be mutated through synonym ID paths without per-tag authorizationInsecure Direct Object Reference (IDOR) · medium
    31 votes
11. DOM Based XSS in Discourse SearchCross-site Scripting (XSS) - Generic · high
    29 votes
12. Stored XSS in "post last edited" optionCross-site Scripting (XSS) - Stored · high
    $25619 votes
13. Gaining access to private topics using quoting featureImproper Access Control - Generic · high
    $25619 votes
14. Any authenticated user can download full list of users, including emailPrivacy Violation · medium
    $25619 votes
15. XSS in topics because of bandcamp preview engine vulnerabilityCross-site Scripting (XSS) - Generic · high
    15 votes
16. XSS vulnerability on Audio and Video parsersCross-site Scripting (XSS) - Generic · high
    $25615 votes
17. XSS Vulnerability on Image link parserCross-site Scripting (XSS) - Generic · high
    $25615 votes
18. Stored XSS in posts because of absence of oembed variables values escapingCross-site Scripting (XSS) - Generic · high
    13 votes
19. Stored XSS in topics because of whitelisted_generic engine vulnerabilityCross-site Scripting (XSS) - Generic · high
    13 votes
20. Users can bookmark other user's messagesPrivilege Escalation · medium
    7 votes
21. Arbitrary `/tmp` read in discourse via `convert_heif!` decoder-confusion (regression of 4bf3bf6786)Information Disclosure · medium
    4 votes