← Database

CVE-2022-41921

LOW CVSS: 3.5 Published: 2022-11-28 Modified: 2026-06-17

Description

Discourse is an open-source discussion platform. Prior to version 2.9.0.beta13, users can post chat messages of an unlimited length, which can cause a denial of service for other users when posting huge amounts of text. Users should upgrade to version 2.9.0.beta13, where a limit has been introduced. No known workarounds are available.

Affected Platforms

Discourse Discourse

Weakness Type

CWE-20, CWE-770

References