Vulnerability Database

309,083

Total vulnerabilities in the database

CVE-2024-21655

Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed. This allows a malicious actor to cause a Discourse instance to use excessive disk space and also often excessive bandwidth. The issue is patched 3.1.4 and 3.2.0.beta4.

  • Published: Jan 12, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-21655
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWEs:

Software From Fixed in
discourse / discourse 3.2.0-beta1 3.2.0-beta1.x
discourse / discourse 3.2.0-beta2 3.2.0-beta2.x
discourse / discourse 3.2.0-beta3 3.2.0-beta3.x
discourse / discourse - 3.1.4