CVE-2024-43789

Discourse is an open source platform for community discussion. A user can create a post with many replies, and then attempt to fetch them all at once. This can potentially reduce the availability of a Discourse instance. This problem has been patched in the latest version of Discourse. All users area are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-400

• https://github.com/discourse/discourse/security/advisories/GHSA-62cq-cpmc-hvqqThird Party Advisory

Published

Oct 7, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-43782This openedx-translations repository contains translation fi…9.8
• CVE-2024-43783The Apollo Router Core is a configurable, high-performance g…7.5
• CVE-2024-43784lakeFS is an open-source tool that transforms object storage…5.7
• CVE-2024-43785gitoxide An idiomatic, lean, fast & safe pure Rust implement…2.5
• CVE-2024-43787Hono is a Web application framework that provides support fo…5
• CVE-2024-43788Webpack is a module bundler. Its main purpose is to bundle J…6.1
• CVE-2024-4379The Premium Addons for Elementor plugin for WordPress is vul…5.4
• CVE-2024-43790Vim is an open source command line text editor. When perform…5.5
• CVE-2024-43791RequestStore provides per-request global storage for Rack. T…7.8
• CVE-2024-43792Halo is an open source website building tool. A security vul…6.1
• CVE-2024-43793Halo is an open source website building tool. A security vul…6.4
• CVE-2024-43794OpenSearch Dashboards Security Plugin adds a configuration m…6.1