{"metadata": {"vulnerability": "cve-2025-24808", "count": 13, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 7}}, "data": [{"timestamp": "2025-01-23T17:11:35.840Z", "date_only": false, "value": "2025-01-23T17:11:35.840Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-24808", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-26T14:08:38.915Z", "date_only": false, "value": "2025-03-26T14:08:38.915Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-24808", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-26T14:14:38.212Z", "date_only": false, "value": "2025-03-26T14:14:38.212Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2025-24808", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-26T14:15:32.417Z", "date_only": false, "value": "2025-03-26T14:15:32.417", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24808", "record": "FKIE_CVE-2025-24808", "field": "published"}, {"timestamp": "2025-03-26T14:25:09Z", "date_only": false, "value": "2025-03-26T14:25:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8845", "record": "CVE-2025-24808", "field": "creation_timestamp", "uuid": "d4a7ea4d-257a-4872-b3ae-bd0cf66c1f31", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24808\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Discourse is an open-source discussion platform. Prior to versions `3.3.4` on the `stable` branch and `3.4.0.beta5` on the `beta` branch, someone who is about to reach the limit of users in a group DM may send requests to add new users in parallel. The requests might all go through ignoring the limit due to a race condition. The patch in versions `3.3.4` and `3.4.0.beta5` uses the `lock` step in service to wrap part of the `add_users_to_channel` service inside a distributed lock/mutex in order to avoid the race condition.\n\ud83d\udccf Published: 2025-03-26T14:08:38.915Z\n\ud83d\udccf Modified: 2025-03-26T14:14:38.212Z\n\ud83d\udd17 References:\n1. https://github.com/discourse/discourse/security/advisories/GHSA-hfcx-qjw6-573r\n2. https://github.com/discourse/discourse/commit/a16b2f224860f6678f89f5ffa012f0ede17e4095", "url": "https://t.me/DarkWebInformer_CVEAlerts/8845"}, {"timestamp": "2025-03-26T16:23:54Z", "date_only": false, "value": "2025-03-26T16:23:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/21178", "record": "CVE-2025-24808", "field": "creation_timestamp", "uuid": "57228ff8-9f5a-46e6-861e-f87f58747d56", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24808 - Discourse Race Condition in Group DM User Addition\", \n  \"Content\": \"CVE ID : CVE-2025-24808 \nPublished : March 26, 2025, 2:15 p.m. | 28\u00a0minutes ago \nDescription : Discourse is an open-source discussion platform. Prior to versions 3.3.4 on the `stable` branch and `3.4.0.beta5` on the `beta` branch, someone who is about to reach the limit of users in a group DM may send requests to add new users in parallel. The requests might all go through ignoring the limit due to a race condition. The patch in versions `3.3.4` and `3.4.0.beta5` uses the `lock` step in service to wrap part of the `add_users_to_channel` service inside a distributed lock/mutex in order to avoid the race condition. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/21178"}, {"timestamp": "2025-03-26T18:26:11.826Z", "date_only": false, "value": "2025-03-26T18:26:11.826750Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-24808", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-26T18:26:11.826Z", "date_only": false, "value": "2025-03-26T18:26:11.826750Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24808", "record": "FKIE_CVE-2025-24808", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-26T18:26:18.555Z", "date_only": false, "value": "2025-03-26T18:26:18.555Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-24808", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-26T18:26:18.555Z", "date_only": false, "value": "2025-03-26T18:26:18.555Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-24808", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-28T09:46:39.640Z", "date_only": false, "value": "2025-03-28T09:46:39.640Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-DISCOURSE-2025-24808", "record": "BIT-DISCOURSE-2025-24808", "field": "published"}, {"timestamp": "2026-06-17T08:59:38.957Z", "date_only": false, "value": "2026-06-17T08:59:38.957", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24808", "record": "FKIE_CVE-2025-24808", "field": "lastModified"}, {"timestamp": "2026-09-10T15:46:03.895Z", "date_only": false, "value": "2026-09-10T15:46:03.895Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-DISCOURSE-2025-24808", "record": "BIT-DISCOURSE-2025-24808", "field": "modified"}]}