CVE-2024-45051
CVSS 3.1 Score 8.2 of 10 (high)
Details
Published Oct 7, 2024
Updated: Oct 19, 2024
CWE ID 287
Summary
CVE-2024-45051 is a newly discovered vulnerability in Discourse, an open-source community discussion platform. Maliciously crafted email addresses can bypass domain-based restrictions, enabling unauthorized access to private sites, categories, and groups. This issue affects all versions prior to the latest stable, beta, and tests-passed releases. Upgrading is the only known solution to mitigate this vulnerability, and there are currently no workarounds available.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Discourse