CVE-2021-43793

    Dashboard / Vulnerabilities / CVE-2021-43793

    CVE-2021-43793

    Published: 1 Dec 2021Last Modified: 9 Jul 2026

    Summary:

    Details: Discourse is an open source discussion platform. In affected versions a vulnerability in the Polls feature allowed users to vote multiple times in a single-option poll. The problem is patched in the latest tests-passed, beta and stable versions of Discourse

    References: https://github.com/discourse/discourse/security/advisories/GHSA-jq7h-44vc-h6qx, https://github.com/discourse/discourse/commit/0c6b9df77bac9c6f7c7e2eadf6fe100064afdeab, https://github.com/discourse/discourse/commit/1d0faedfbc3a8b77b971dc70d25e30791dbb6e0b

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -30bc65af7036465001efc8c06b421e5098073538

    Affected versions

    2.8.0-beta1
    2.8.0-beta2
    2.8.0-beta3
    2.8.0-beta4
    2.8.0-beta5
    2.8.0-beta6
    2.8.0-beta7

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-43793 | CVE-DB