https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 08:09:06 +0000 https://cve.radiocsirt.org/vuln/bit-discourse-2021-37693 <p><strong>Affected:</strong> Bitnami: discourse</p> <p>Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when adding additional email addresses to an existing account on a Discourse site an email token is generated as part of the email verification process. Deleting the additional email address does not invalidate an unused token which can then be used in other contexts, including reseting a password.</p> <p><strong>Affected:</strong> Bitnami: discourse</p> <p>Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when adding additional email addresses to an existing account on a Discourse site an email token is generated as part of the email verification process. Deleting the additional email address does not invalidate an unused token which can then be used in other contexts, including reseting a password.</p> https://cve.radiocsirt.org/vuln/bit-discourse-2021-37693 https://cve.radiocsirt.org/vuln/cnvd-2021-100595 cnvd-2021-100595 https://cve.radiocsirt.org/vuln/cnvd-2021-100595 https://cve.radiocsirt.org/vuln/euvd-2026-29916 EUVD-2026-29916 https://cve.radiocsirt.org/vuln/euvd-2026-29916 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37693 <p>Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when adding additional email addresses to an existing account on a Discourse site an email token is generated as part of the email verification process. Deleting the additional email address does not invalidate an unused token which can then be used in other contexts, including reseting a password.</p> <p>Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta4, when adding additional email addresses to an existing account on a Discourse site an email token is generated as part of the email verification process. Deleting the additional email address does not invalidate an unused token which can then be used in other contexts, including reseting a password.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-37693 https://cve.radiocsirt.org/vuln/gsd-2021-37693 gsd-2021-37693 https://cve.radiocsirt.org/vuln/gsd-2021-37693