CVE-2025-61598CWE-524

CVE-2025-61598

Medium · published October 29, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

Discourse is an open source discussion platform. Version before 3.6.2 and 3.6.0.beta2, default Cache-Control response header with value no-store, no-cache was missing from error responses. This may caused unintended caching of those responses by proxies potentially leading to cache poisoning attacks. This vulnerability is fixed in 3.6.2 and 3.6.0.beta2.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00301 · 21.6th percentile
Weakness
CWE-524 · Use of Cache Containing Sensitive Information
Published
2025-10-29T01:15Z
Affected products (3)
ProductVersionsFixed in
discourse/discourse< 3.5.23.5.2
discourse/discourse< 3.6.03.6.0
discourse/discourseall versions—
References (3)
https://github.com/discourse/discourse/commit/3ea1b663c82c067e5ca778db846bad1e082ba6cd · [email protected]https://github.com/discourse/discourse/commit/fd567af7bf5a15c70772021acbdf5d38487a31bc · [email protected]https://github.com/discourse/discourse/security/advisories/GHSA-jp9x-wwv6-cv3j · [email protected]
EPSS history
Timeline
  • 28 OCT 20:38Z
    Discourse is missing Cache-Control response header on error responses
    cvelistv5