CVE-2024-52589

LOW2.7EPSS 0.41%

Moderators can view Screened emails even when the “moderators view emails” option is disabled in Discourse

Published: 12/23/2024Modified: 8/27/2025

Also known as:GHSA-cqw6-rr3v-8fffBIT-discourse-2024-52589

Description

Discourse is an open source platform for community discussion. Moderators can see the Screened emails list in the admin dashboard, and through that can learn the email of a user. This problem is patched in the latest version of Discourse. Users unable to upgrade should remove moderator role from untrusted users.

Affected packages (1)

Bitnami/discoursefrom 0, < 3.3.3

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	LOW2.7	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

References (2)

WEBhttps://github.com/discourse/discourse/security/advisories/GHSA-cqw6-rr3v-8fff
WEBhttps://nvd.nist.gov/vuln/detail/CVE-2024-52589