CVE-2024-52794

6.1 mediumEPSS 0.3%

Medium (6.1) in discourse discourse. EPSS 0.3% chance of exploitation in the next 30 days.

Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched in the latest version of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-12-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

discourse:discourse

References

https://github.com/discourse/discourse/security/advisories/GHSA-m3v4-v2rp-hfm9

Check your stack JSON