Detections
Analytics

Discourse < 3.3.3 Backup Disclosure

medium Web App Scanning Plugin ID 115009

Language:

Synopsis

Discourse < 3.3.3 Backup Disclosure

Description

Discourse versions prior to 3.3.3 are vulnerable to a backup disclosure vulnerability due to improper handling of file downloads in the `rails send_file` method. An attacker could exploit this vulnerability to download backup files containing sensitive information, potentially leading to data exposure.

Solution

Upgrade to Discourse 3.3.3 or later.

See Also

https://projectdiscovery.io/blog/discourse-backup-disclosure-rails-send_file-quirk

Plugin Details

Severity: Medium

ID: 115009

Type: remote

Published: 10/21/2025

Updated: 10/21/2025

Scan Template: basic, full, pci, scan

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: Medium

Base Score: 5.4

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2024-53991

CVSS v3

Risk Factor: Medium

Base Score: 5.9

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS Score Source: CVE-2024-53991

Vulnerability Information

CPE: cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 12/18/2024

Vulnerability Publication Date: 12/18/2024

Reference Information

CVE: CVE-2024-53991