Discourse Security Patch: Fixes for XSS, Info Leak, and Privilege Escalation Issues

Vulnerability Overview This webpage screenshot displays a security fix pull request (PR #2092) for the Discourse platform, aimed at remediating multiple security vulnerabilities. These vulnerabilities involve Cross-Site Scripting (XSS), information disclosure, and privilege escalation bypasses. Scope of Impact XSS Vulnerabilities: Multiple issues involve XSS attacks, including through stored XSS, unescaped user input, and hidden tag names. Information Disclosure: There is a risk of sensitive information being leaked via serialization and logging mechanisms. Privilege Escalation Bypass: There is a risk of privilege escalation by bypassing certain security checks. Remediation XSS Fixes: Sanitize inputs, restrict allowed tags and attributes, and prevent XSS attacks. Information Disclosure Fixes: Restrict sensitive information in logs and fix information disclosure issues during serialization. Privilege Escalation Bypass Fixes: Strengthen security checks to prevent privilege escalation. Specific Fixes DEV: Add Regression Coverage For Stored XSS in staff action logs info SECURITY: Scope PM reviewables to their allowed audience [backport 20...] SECURITY: Scope AI bot reply stream to the PM's participants [backport...] SECURITY: Templates endpoint exposes hidden tag names [backport 2026.1] SECURITY: Duplicate lookup reveals restricted topic titles through... SECURITY: Anonymous sidebar serialization exposes descriptions of cat... SECURITY: Stored XSS chat-transcript username unescaped in Rich Text... SECURITY: Prevent HTML injection in discourse-local-dates rendering [...] SECURITY: Sanitize flag reason HTML in review timeline [backport 2026.1] SECURITY: Private Chat Threat Message Disclosure via Chat Embed Chan... SECURITY: Respect topic visibility in reviewable score serializer [pa... SECURITY: Stored XSS via unescaped actor name in post actions [backpo... SECURITY: Shared-draft titles and excerpts leak through group post se... SECURITY: Prevent cache poisoning/XSS via color scheme cookies [backp... SECURITY: Stop exposing hidden tag names through category serializers... SECURITY: Hidden first-post excerpt is emitted in Q&A schema JSON-LD... DEV: Bump release branch to v2026.1-0 POC Code or Exploit Code No specific POC or exploit code is included on the page. Summary This security fix pull request (PR #2092) addresses multiple security vulnerabilities in the Discourse platform, including XSS, information disclosure, and privilege escalation bypasses. The remediation measures include input sanitization, restricting sensitive information leakage, and strengthening security checks. The specific fixes involve multiple commits, each addressing particular security issues.

Goal Reached Thanks to every supporter — we hit 100%!

Discourse Security Patch: Fixes for XSS, Info Leak, and Privilege Escalation Issues

More from this source