CVE-2024-53991

Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use `FileStore::LocalStore` which means uploads and backups are stored locally on disk. If an attacker knows the name of the Discourse backup file, the attacker can trick nginx into sending the Discourse backup file with a well crafted request. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. Users unable to upgrade can either 1. Download all local backups on to another storage device, disable the `enable_backups` site setting and delete all backups until the site has been upgraded to pull in the fix. Or 2. Change the `backup_location` site setting to `s3` so that backups are stored and downloaded directly from S3.

• CWE-200

• https://github.com/discourse/discourse/security/advisories/GHSA-567m-82f6-56rvMitigation, Third Party Advisory

Published

Dec 19, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-53986rails-html-sanitizer is responsible for sanitizing HTML frag…6.1
• CVE-2024-53987rails-html-sanitizer is responsible for sanitizing HTML frag…6.1
• CVE-2024-53988rails-html-sanitizer is responsible for sanitizing HTML frag…6.1
• CVE-2024-53989rails-html-sanitizer is responsible for sanitizing HTML frag…6.1
• CVE-2024-5399Openfind Mail2000 does not properly filter parameters of spe…7.2
• CVE-2024-53990The AsyncHttpClient (AHC) library allows Java applications t…9.2
• CVE-2024-53992unzip-bot is a Telegram bot to extract various types of arch…8.8
• CVE-2024-53994Discourse is an open source platform for community discussio…4.3
• CVE-2024-53995SickChill is an automatic video library manager for TV shows…1.9
• CVE-2024-53996Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-53999Mobile Security Framework (MobSF) is a pen-testing, malware …5.4
• CVE-2024-5400Openfind Mail2000 does not properly filter parameters of spe…8.8