medium4.3
CVE-2025-32376
Discourse is an open-source discussion platform.
Impact
Discourse is an open-source discussion platform. Prior to versions 3.4.3 on the stable branch and 3.5.0.beta3 on the beta branch, the users limit for a DM can be bypassed, thus giving the ability to potentially create a DM with every user from a site in it. This issue has been patched in stable version 3.4.3 and beta version 3.5.0.beta3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Discourse | Discourse | before 3.4.3 Versions 1.1.0, 1.2.0, 1.3.0, 1.4.0, 1.5.0 |