Data Leak Vulnerability in Discourse Community Platform

CVE-2025-46813

What is CVE-2025-46813?

The open-source community platform Discourse has a data leak vulnerability that affects login-required sites deployed within a specific timeframe. Sites launched between the specified commits may unintentionally expose private content on their homepages to users who have not logged in. This vulnerability impacts instances deployed from April 30, 2025, noon EDT to May 2, 2025, noon EDT. It is crucial for affected site administrators to upgrade to versions post the correction commit to safeguard their sites, as no workarounds are available.

References