← All advisories

Medium severity6.5NVD Advisory· Published Aug 26, 2019· Updated Jun 17, 2026

CVE-2019-15515

CVE-2019-15515

Description

Discourse 2.3.2 sends the CSRF token in the query string.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Discourse (software)/Discourse2 versions
cpe:2.3:a:discourse:discourse:2.3.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:discourse:discourse:2.3.2:*:*:*:*:*:*:*
- (no CPE)range: <2.3.2
Discourse/Discoursedescription

Patches

Vulnerability mechanics

References

1

github.com/discourse/discourse/pull/8026nvdPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.