CVE-2024-37157CWE-918

Discourse vulnerable to Server-Side Request Forgery via FastImage

Medium · published July 3, 2024

CVSS v3.1
6.4
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta4 on the `beta` and `tests-passed` branches, a malicious actor could get the FastImage library to redirect requests to an internal Discourse IP. This issue is patched in version 3.2.3 on the `stable` branch and version 3.3.0.beta4 on the `beta` and `tests-passed` branches. No known workarounds are available.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00348 · 27.1th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2024-07-03T19:13Z
EPSS history
Timeline
  • 03 JUL 19:13Z
    Discourse vulnerable to Server-Side Request Forgery via FastImage
    cvelistv5