CVE-2024-45297: Discourse

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Discourse is an open source platform for community discussion. Users can see topics with a hidden tag if they know the label/name of that tag. This issue has been patched in the latest stable, beta and tests-passed version of Discourse. All users area are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products

• Discourse Discourse: before 3.3.2 (fixed in 3.3.2); before 3.4.0 (fixed in 3.4.0); version 3.4.0 only

Published 2024-10-07. Last modified 2026-06-17.