VYPR
← All advisories
Low severity2.2NVD Advisory· Published Feb 4, 2025· Updated Jun 17, 2026

CVE-2024-56197

CVE-2024-56197

Description

Discourse is an open source platform for community discussion. PM titles and metadata can be read by other users when the "PM tags allowed for groups" option is enabled, the other user is a member of a group added to this option, and the PM has been tagged. This issue has been patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. Users unable to upgrade should remove all groups from the the "PM tags allowed for groups" option.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Discourse (software)/Discourse8 versions
    cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*+ 7 more
    • cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*range: <3.4.0
    • cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*range: <3.3.4
    • cpe:2.3:a:discourse:discourse:3.4.0:beta1:*:*:beta:*:*:*
    • cpe:2.3:a:discourse:discourse:3.4.0:beta2:*:*:beta:*:*:*
    • cpe:2.3:a:discourse:discourse:3.4.0:beta3:*:*:beta:*:*:*
    • cpe:2.3:a:discourse:discourse:3.4.0:beta4:*:*:beta:*:*:*
    • (no CPE)
    • (no CPE)range: stable: <= 3.3.3
  • osv-coords
    pkg:bitnami/discourse
    Range: < 3.4.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.