Medium severity5.3NVD Advisory· Published Dec 1, 2021· Updated Jun 17, 2026
CVE-2021-43794
CVE-2021-43794
Description
Discourse is an open source discussion platform. In affected versions an attacker can poison the cache for anonymous (i.e. not logged in) users, such that the users are shown a JSON blob instead of the HTML page. This can lead to a partial denial-of-service. This issue is patched in the latest stable, beta and tests-passed versions of Discourse.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*range: <2.7.11
- (no CPE)
- (no CPE)range: stable < 2.7.11
Patches
Vulnerability mechanics
References
2- github.com/discourse/discourse/commit/2da0001965c6d8632d723c46ea5df9f22a1a23f1nvdPatchThird Party Advisory
- github.com/discourse/discourse/security/advisories/GHSA-249g-pc77-65hpnvdThird Party Advisory
News mentions
0No linked articles in our index yet.