CVE-2024-47773

Summary

CVE-2024-47773 is a vulnerability affecting Discourse, an open-source community discussion platform. An attacker can exploit this issue by making multiple XHR (XMLHttpRequest) requests, eventually poisoning the cache with a malicious response. Notably, this vulnerability only impacts anonymous visitors of the site. A patch has been released to address this issue, and Discourse users are strongly encouraged to upgrade. For those who cannot upgrade immediately, Discourse recommends disabling anonymous cache by setting the `DISCOURSE_DISABLE_ANON_CACHE` environment variable to any non-empty value.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.