CVE-2024-21655

Summary

CVE-2024-21655 is a vulnerability affecting Discourse, a community discussion platform. The issue arises from a lack of limits on sizes for client-editable fields, enabling malicious actors to cause excessive disk space usage and high bandwidth consumption on Discourse instances. This can lead to potential denial-of-service attacks. The vulnerability has been addressed in versions 3.1.4 and 3.2.0.beta4 of Discourse.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.