CVE-2024-53991: Potential Backup file leaked via Nginx in Discourse
Affected: discourse · Exploitation: check available, not yet exploited
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 98% of scored CVEs
DescriptionCVE.org
Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use `FileStore::LocalStore` which means uploads and backups are stored locally on disk. If an attacker knows the name of the Discourse backup file, the attacker can trick nginx into sending the Discourse backup file with a well crafted request. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. Users unable to upgrade can either 1. Download all local backups on to another storage device, disable the `enable_backups` site setting and delete all backups until the site has been upgraded to pull in the fix. Or 2. Change the `backup_location` site setting to `s3` so that backups are stored and downloaded directly from S3.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- discourse · discoursestable: <= 3.3.2; beta: <= 3.4.0.beta3; tests-passed: <= 3.4.0.beta3
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Check available, not yet exploited. A public nuclei template can confirm it on a system you are authorised to test.
- CISA KEV
- Not listed
- Public check
- Discourse Backup File Disclosure Via Default Nginx Configuration · nuclei template in projectdiscovery/nuclei-templates
- Vendor
- discourse
- Published
- December 2024
CoverageNo articles yet
No CyberSIXT article names CVE-2024-53991 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.