Main
Vulnerability Database
Exploits
ID:12210 - Exploit for Reusing a Nonce, Key Pair in Encryption in Discourse - CVE-2023-37467
ID:12210 - Exploit for Reusing a Nonce, Key Pair in Encryption in Discourse - CVE-2023-37467
Published: December 17, 2025
Vulnerability identifier: #VU78763
Vulnerability risk: Medium
CVE-ID: CVE-2023-37467
CWE-ID: CWE-323
Exploitation vector: Remote access
Vulnerable software:
Discourse
Discourse
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to the CSP (Content Security Policy) nonce reuse issue. A remote user can bypass CSP protection.
Remediation
Install updates from vendor's website.