CVE-2024-43789: Discourse

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Discourse is an open source platform for community discussion. A user can create a post with many replies, and then attempt to fetch them all at once. This can potentially reduce the availability of a Discourse instance. This problem has been patched in the latest version of Discourse. All users area are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products

• Discourse Discourse: before 3.3.1 (fixed in 3.3.1); up to and including 3.4.0

Published 2024-10-07. Last modified 2026-06-17.