BIT-discourse-2024-52794

vendorUSosv

Magnific lightbox susceptible to Cross-site Scripting in Discourse

view advisory published 2024-12-23Licence: per source

Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched in the latest version of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-52794US	medium6.1	0.29% (21st)	Exploit	2024-12-19
Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched in the latest version of Discour…

references

External citations — patches, advisories, analysis.

https://github.com/discourse/discourse/security/advisories/GHSA-m3v4-v2rp-hfm9ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2024-52794WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan