Vulnerability Database

318,638

Total vulnerabilities in the database

CVE-2020-24327

Server Side Request Forgery (SSRF) vulnerability exists in Discourse 2.3.2 and 2.6 via the email function. When writing an email in an editor, you can upload pictures of remote websites.

  • Published: Sep 23, 2021
  • Updated: Nov 16, 2025
  • CVE: CVE-2020-24327
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
discourse / discourse 2.3.2 2.3.2.x
discourse / discourse 2.6.0 2.6.0.x