1. Home
  2. CVE Database
  3. CVE-2024-49765
MEDIUM · 5.3

CVE-2024-49765

Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow attackers to bypass discourse connect to create ac...

Vulnerability Description

Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow attackers to bypass discourse connect to create accounts and login. This problem is patched in the latest version of Discourse. Users unable to upgrade who are using discourse connect may disable all other login methods as a workaround.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DiscourseDiscourse< 3.3.3

Related Weaknesses (CWE)

CWE-359

References

FAQ

What is CVE-2024-49765?

CVE-2024-49765 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow attackers to bypass discourse connect to create ac...

How severe is CVE-2024-49765?

CVE-2024-49765 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-49765?

Check the references section above for vendor advisories and patch information. Affected products include: Discourse Discourse.