https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T08:09:32.472208+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-discourse-2021-37693 BIT-discourse-2021-37693 — Re-use of email tokens in Discourse 2026-10-08T08:09:32.475348+00:00

Affected: Bitnami: discourse

Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when adding additional email addresses to an existing account on a Discourse site an email token is generated as part of the email verification process. Deleting the additional email address does not invalidate an unused token which can then be used in other contexts, including reseting a password.

 https://cve.radiocsirt.org/vuln/cnvd-2021-100595 cnvd-2021-100595 2026-10-08T08:09:32.475397+00:00 cnvd-2021-100595 https://cve.radiocsirt.org/vuln/euvd-2026-29916 EUVD-2026-29916 2026-10-08T08:09:32.475414+00:00 EUVD-2026-29916 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37693 fkie_cve-2021-37693 2026-10-08T08:09:32.475427+00:00

Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when adding additional email addresses to an existing account on a Discourse site an email token is generated as part of the email verification process. Deleting the additional email address does not invalidate an unused token which can then be used in other contexts, including reseting a password.

 https://cve.radiocsirt.org/vuln/gsd-2021-37693 gsd-2021-37693 2026-10-08T08:09:32.475448+00:00 gsd-2021-37693