Vulnerabilities CVE-2026-45780

CVE-2026-45780

Medium

Open

TLP:CLEAR

Discourse: Private event sample invitees are serialized to non-invited event viewers

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, EventSerializer could expose invited group names, sample invitees, and attendance statistics to users who could view the topic but were not entitled to view the private event invitee list. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.

Details

CVSS Score: 5.3
EPSS Score ⓘ: 0.36%

29.3th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Confidence: 90%
Published: Jul 9, 2026
Last Modified: Jul 14, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.