CVE-2024-37299

Katalog CVE

CVSS 7.5 · High EPSS 0,60%

Kerentanan Uncontrolled Resource Consumption pada discourse. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, crafting requests to submit very long tag group names can reduce the availability of a Discourse instance. This vulnerability is fixed in 3.2.5 and 3.3.0.beta5.

Rincian

Terbit di NVD

30 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

0,60% peluang dieksploitasi; lebih tinggi dari 47,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/discourse/discourse/security/advisories/GHSA-4j6h-9pjp-5476 advisory vendor
• https://github.com/discourse/discourse/commit/188cb58daa833839c54c266ce22db150a3f3a210 patch
• https://github.com/discourse/discourse/commit/76f06f6b1491db6bd09a4017d2c5591431b3b16e patch