all InfoSec News logo
all InfoSec News - Your InfoSec news aggregator
Log in Sign up
all InfoSec News

Discourse doesn't limit reviewable user serializer payloadDiscourse is an ope...

Add to bookmarks
July 3, 2024, 7:10 p.m. |

CVE | THREATINT - NEW cve.threatint.com

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta4 on the `beta` and `tests-passed` branches, moderators using the review queue t...

beta discourse limit platform queue review tests using version

Visit resource

More from cve.threatint.com / CVE | THREATINT - NEW

IBM i privilege escalationIBM System Management for i 7.2, 7.3, and 7.4 could... an hour ago | cve.threatint.com
actor call code ibm +9
IBM FlashSystem denial of serviceIBM FlashSystem 5300 USB ports may be usable... 2 hours ago | cve.threatint.com
access administrator disabled ibm +8
Cross-site Scripting (XSS) - Stored in stitionai/devikaCross-site Scripting (... 3 hours ago | cve.threatint.com
cross-site github github repository repository +2
heyewei SpringBootCMS Guestbook guestbook cross site scriptingA vulnerability... 4 hours ago | cve.threatint.com
classified file found function +1
SSRF and Partial LFI in /models/apply Endpoint in mudler/localaiA vulnerabili... 7 hours ago | cve.threatint.com
endpoint file forgery http +9
Stored XSS in stangirard/quivrA stored cross-site scripting (XSS) vulnerabili... 7 hours ago | cve.threatint.com
can cross-site feature files +9
Denial of Service via Quadratic Complexity in kjd/idnaA vulnerability was ide... 7 hours ago | cve.threatint.com
complexity denial of service function handling +7
EGroupware before 23.1.20240624 mishandles an ORDER BY clause. 12 hours ago | cve.threatint.com
order
WordPress WP To Do plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability... 13 hours ago | cve.threatint.com
1.3.0 cross-site cross site scripting input +9

Jobs in InfoSec / Cybersecurity

Find Talent

Principal Architect - LINUX - Active Top Secret Required

@ General Dynamics Information Technology | USA DC Washington - Customer Proprietary (DCC076)
View on infosec-jobs.com

Expert SOAR (CORTEX)

@ Alter Solutions | PARIS, France
View on infosec-jobs.com

Program Management Analyst

@ Peraton | Arlington, VA, United States
View on infosec-jobs.com

Gestion des menaces et des vulnérabilités

@ Alter Solutions | Paris, France
View on infosec-jobs.com

Senior IAM Security Engineer

@ WEX | Brazil - Remote Office
View on infosec-jobs.com

Senior Information Security Engineer

@ Ameriprise Financial Services | 11071 Ameriprise India - Hyderabad
View on infosec-jobs.com