CVE-2023-36818

MediumCVSS 6.5

Published: 14/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

43th percentile - higher than 43% of all known CVEs

Summary

Discourse is an open source discussion platform with a vulnerability that can cause a denial of service when attempting to create or update a custom sidebar section. This issue has been patched in commit `52b003d915`.

Risk Assessment

Organizations may experience downtime of the discussion platform, impacting user communication and collaboration.

Recommendation

It is recommended to upgrade to the latest version of Discourse to mitigate this vulnerability.

Original NVD description (English source)

Discourse is an open source discussion platform. In affected versions a request to create or update custom sidebar section can cause a denial of service. This issue has been patched in commit `52b003d915`. Users are advised to upgrade. There are no known workarounds for this vulnerability.