{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-22T07:32:08.890","vulnerabilities":[{"cve":{"id":"CVE-2024-23834","sourceIdentifier":"security-advisories@github.com","published":"2024-01-30T22:15:53.307","lastModified":"2024-11-21T08:58:31.477","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Discourse is an open-source discussion platform. Improperly sanitized user input could lead to an XSS vulnerability in some situations. This vulnerability only affects Discourse instances which have disabled the default Content Security Policy. The vulnerability is patched in 3.1.5 and 3.2.0.beta5.  As a workaround, ensure Content Security Policy is enabled and does not include `unsafe-inline`."},{"lang":"es","value":"Discourse es una plataforma de discusión de código abierto. La entrada del usuario mal sanitizada podría provocar una vulnerabilidad XSS en algunas situaciones. Esta vulnerabilidad solo afecta a las instancias de Discourse que han deshabilitado la Política de seguridad de contenido predeterminada. La vulnerabilidad está parcheada en 3.1.5 y 3.2.0.beta5. Como workaround, asegúrese de que la Política de seguridad de contenido esté habilitada y no incluya \"unsafe-inline\"."}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*","versionEndExcluding":"3.1.5","matchCriteriaId":"64C82627-1660-4628-8F03-A8D148EACDA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*","versionEndExcluding":"3.2.0","matchCriteriaId":"E10444D1-B4E6-4EA7-A56E-95BD0FA3E39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:3.2.0:beta1:*:*:beta:*:*:*","matchCriteriaId":"1BFF647B-6CEF-43BF-BF5E-C82B557F78E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:3.2.0:beta2:*:*:beta:*:*:*","matchCriteriaId":"10D931DE-F8F5-4A34-A30A-FDD4420ABD1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:3.2.0:beta3:*:*:beta:*:*:*","matchCriteriaId":"C62C36D4-6CE7-4A57-BBF7-8066CFAE342A"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:3.2.0:beta4:*:*:beta:*:*:*","matchCriteriaId":"84DF2347-8189-4983-BD23-3E43050C6795"}]}]}],"references":[{"url":"https://github.com/discourse/discourse/commit/568d704a94c528b7c2cb0f3512a7b7b606bc3000","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/discourse/discourse/security/advisories/GHSA-rj3g-8q6p-63pc","source":"security-advisories@github.com","tags":["Vendor Advisory"]},{"url":"https://meta.discourse.org/t/3-1-5-security-and-bug-fix-release/293094","source":"security-advisories@github.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://meta.discourse.org/t/3-2-0-beta5-add-groups-to-dms-mobile-chat-footer-redesign-passkeys-enabled-by-default-and-more/293093","source":"security-advisories@github.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://github.com/discourse/discourse/commit/568d704a94c528b7c2cb0f3512a7b7b606bc3000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/discourse/discourse/security/advisories/GHSA-rj3g-8q6p-63pc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://meta.discourse.org/t/3-1-5-security-and-bug-fix-release/293094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://meta.discourse.org/t/3-2-0-beta5-add-groups-to-dms-mobile-chat-footer-redesign-passkeys-enabled-by-default-and-more/293093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}}]}