CVE-2024-53994

Discourse is an open source platform for community discussion. In affected versions users who disable chat in preferences could still be reachable in some cases. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable the chat plugin within site settings.

• CWE-281

• https://github.com/discourse/discourse/security/advisories/GHSA-mrpw-gwj7-98r6Third Party Advisory

Published

Feb 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-53988rails-html-sanitizer is responsible for sanitizing HTML frag…6.1
• CVE-2024-53989rails-html-sanitizer is responsible for sanitizing HTML frag…6.1
• CVE-2024-5399Openfind Mail2000 does not properly filter parameters of spe…7.2
• CVE-2024-53990The AsyncHttpClient (AHC) library allows Java applications t…9.2
• CVE-2024-53991Discourse is an open source platform for community discussio…5.9
• CVE-2024-53992unzip-bot is a Telegram bot to extract various types of arch…8.8
• CVE-2024-53995SickChill is an automatic video library manager for TV shows…1.9
• CVE-2024-53996Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-53999Mobile Security Framework (MobSF) is a pen-testing, malware …5.4
• CVE-2024-5400Openfind Mail2000 does not properly filter parameters of spe…8.8
• CVE-2024-54000Mobile Security Framework (MobSF) is a pen-testing, malware …7.5
• CVE-2024-54001Kanboard is project management software that focuses on the …5.5