CVE-2021-37703: Discourse

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta5, a user's read state for a topic such as the last read post number and the notification level is exposed.

Affected products

• Discourse Discourse: before 2.7.8 (fixed in 2.7.8); version 2.8.0 only

Published 2021-08-13. Last modified 2026-06-17.