CVE-2024-39320

Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, the vulnerability allows an attacker to inject iframes from any domain, bypassing the intended restrictions enforced by the allowed_iframes setting. This vulnerability is fixed in 3.2.5 and 3.3.0.beta5.

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/discourse/discourse/commit/188cb58daa833839c54c266ce22db150a3f3a210	Patch
https://github.com/discourse/discourse/commit/76f06f6b1491db6bd09a4017d2c5591431b3b16e	Patch
https://github.com/discourse/discourse/security/advisories/GHSA-4p82-xh38-gq4p	Vendor Advisory
https://github.com/discourse/discourse/commit/188cb58daa833839c54c266ce22db150a3f3a210	Patch
https://github.com/discourse/discourse/commit/76f06f6b1491db6bd09a4017d2c5591431b3b16e	Patch
https://github.com/discourse/discourse/security/advisories/GHSA-4p82-xh38-gq4p	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:discourse:discourse:::::stable:::*
	cpe:2.3:a:discourse:discourse:3.3.0:beta1:::beta:::*
	cpe:2.3:a:discourse:discourse:3.3.0:beta2:::beta:::*
	cpe:2.3:a:discourse:discourse:3.3.0:beta3:::beta:::*
	cpe:2.3:a:discourse:discourse:3.3.0:beta4:::beta:::*

History

No history.

Information

Published : 2024-07-30 15:15

Updated : 2024-11-21 09:27

NVD link : CVE-2024-39320

Mitre link : CVE-2024-39320

CVE.ORG link : CVE-2024-39320

JSON object : View

Products Affected

discourse

discourse

CWE

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-1021

Improper Restriction of Rendered UI Layers or Frames

{"id": "CVE-2024-39320", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "published": "2024-07-30T15:15:12.180", "references": [{"url": "https://github.com/discourse/discourse/commit/188cb58daa833839c54c266ce22db150a3f3a210", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/discourse/discourse/commit/76f06f6b1491db6bd09a4017d2c5591431b3b16e", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/discourse/discourse/security/advisories/GHSA-4p82-xh38-gq4p", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/discourse/discourse/commit/188cb58daa833839c54c266ce22db150a3f3a210", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/discourse/discourse/commit/76f06f6b1491db6bd09a4017d2c5591431b3b16e", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/discourse/discourse/security/advisories/GHSA-4p82-xh38-gq4p", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-74"}, {"lang": "en", "value": "CWE-1021"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-1021"}]}], "descriptions": [{"lang": "en", "value": "Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, the vulnerability allows an attacker to inject iframes from any domain, bypassing the intended restrictions enforced by the allowed_iframes setting. This vulnerability is fixed in 3.2.5 and 3.3.0.beta5."}, {"lang": "es", "value": " Discourse es una plataforma de discusi\u00f3n de c\u00f3digo abierto. Antes de 3.2.5 y 3.3.0.beta5, la vulnerabilidad permit\u00eda a un atacante inyectar iframes desde cualquier dominio, evitando las restricciones previstas impuestas por la configuraci\u00f3n de Allow_iframes. Esta vulnerabilidad se solucion\u00f3 en 3.2.5 y 3.3.0.beta5."}], "lastModified": "2024-11-21T09:27:27.230", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*", "vulnerable": true, "matchCriteriaId": "1E60FC27-D34F-462D-97E0-9B0A3A2D5CFD", "versionEndExcluding": "3.2.5"}, {"criteria": "cpe:2.3:a:discourse:discourse:3.3.0:beta1:*:*:beta:*:*:*", "vulnerable": true, "matchCriteriaId": "4FE1C6B5-D21B-46CC-A889-EECE10A7130A"}, {"criteria": "cpe:2.3:a:discourse:discourse:3.3.0:beta2:*:*:beta:*:*:*", "vulnerable": true, "matchCriteriaId": "51C031F6-729E-4560-B33D-382177F2DB7D"}, {"criteria": "cpe:2.3:a:discourse:discourse:3.3.0:beta3:*:*:beta:*:*:*", "vulnerable": true, "matchCriteriaId": "5C2ABCC5-86B0-4CFF-AB99-BAC4D5CD94C7"}, {"criteria": "cpe:2.3:a:discourse:discourse:3.3.0:beta4:*:*:beta:*:*:*", "vulnerable": true, "matchCriteriaId": "F43AEDD5-616E-4ADF-BA3E-8B1537A7CDE7"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}