Approved changes feed: RSS · Atom

cpe:2.3:a:discourse:discourse:3.3.0:-:*:*:beta:*:*:*

part: a version: 3.3.0 update: -

VendorDiscourse (2d3c125b-857a-5933-b846-ed7f9d5e0225)
ProductDiscourse (4347364d-ae10-5ab6-a9ec-6e7dcaf78dd8)
Edition*
Language*
Software editionbeta
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/discourse/discourse purl2cpe 2026-06-01 10:13:03.596526
pkg:rpm/opensuse/discourse purl2cpe 2026-06-01 10:13:03.596528

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28242 vulnerable 2026-06-03 14:55:25.362602 Disclosure of the existence of secret categories with custom backgrounds in Discourse
MEDIUM (5.3)
Discourse is an open source platform for community discussion. In affected versions an attacker can learn that secret categories exist when they have backgrounds set. The issue is patched in the latest stable, beta and tests-passed version of Discourse. Users are advised to upgrade. Users unable to upgrade should temporarily remove category backgrounds.
Published: 2024-03-15T19:21:01.130Z
Updated: 2024-08-26T15:02:31.216Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.