https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T08:17:57.142833+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-discourse-2024-39320 BIT-discourse-2024-39320 — Discourse allows iframe injection though default site setting 2026-10-10T08:17:57.198524+00:00

Affected: Bitnami: discourse

Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, the vulnerability allows an attacker to inject iframes from any domain, bypassing the intended restrictions enforced by the allowed_iframes setting. This vulnerability is fixed in 3.2.5 and 3.3.0.beta5.

 https://cve.radiocsirt.org/vuln/euvd-2026-6128 EUVD-2026-6128 2026-10-10T08:17:57.198574+00:00 EUVD-2026-6128 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39320 fkie_cve-2024-39320 2026-10-10T08:17:57.198590+00:00

Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, the vulnerability allows an attacker to inject iframes from any domain, bypassing the intended restrictions enforced by the allowed_iframes setting. This vulnerability is fixed in 3.2.5 and 3.3.0.beta5.