CVE-2024-52589

Discourse is an open source platform for community discussion. Moderators can see the Screened emails list in the admin dashboard, and through that can learn the email of a user. This problem is patched in the latest version of Discourse. Users unable to upgrade should remove moderator role from untrusted users.

• CWE-200

• https://github.com/discourse/discourse/security/advisories/GHSA-cqw6-rr3v-8fffVendor Advisory

Published

Dec 19, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-52583The WesHacks GitHub repository provides the official Hackath…8.2
• CVE-2024-52584Autolab is a course management service that enables auto-gra…5.4
• CVE-2024-52585Autolab is a course management service that enables auto-gra…5.4
• CVE-2024-52586eLabFTW is an open source electronic lab notebook for resear…7.8
• CVE-2024-52587StepSecurity's Harden-Runner provides network egress filteri…8.8
• CVE-2024-52588Strapi is an open-source content management system. Prior to…7.5
• CVE-2024-5259The MultiVendorX Marketplace – WooCommerce MultiVendor Marke…5.4
• CVE-2024-52590Misskey is an open source, federated social media platform. …6.5
• CVE-2024-52591Misskey is an open source, federated social media platform. …9.3
• CVE-2024-52592Misskey is an open source, federated social media platform. …5.3
• CVE-2024-52593Misskey is an open source, federated social media platform.I…5.3
• CVE-2024-52594Gomatrixserverlib is a Go library for matrix federation. Gom…4.3