CVE-2020-24327

PoC ×2—

CVSS 3.1

5.3 medium

EPSS

1%p63

Published

Sep 23, 2021 (Sep 23, 2021)

Modified

Jun 17, 2026

Description

Server Side Request Forgery (SSRF) vulnerability exists in Discourse 2.3.2 and 2.6 via the email function. When writing an email in an editor, you can upload pictures of remote websites.

Vendors: discourse
Products: discourse
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.