CVE-2021-43793: Discourse

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Discourse is an open source discussion platform. In affected versions a vulnerability in the Polls feature allowed users to vote multiple times in a single-option poll. The problem is patched in the latest tests-passed, beta and stable versions of Discourse

Affected products

• Discourse Discourse: before 2.7.11 (fixed in 2.7.11); version 2.8.0 only

Published 2021-12-01. Last modified 2026-06-17.