🎯 New Report #3400140: Denial of Service (DoS) Vulnerability in Drafts Creation Endpoint
🔺Severity: High
👽 Reporter: dpaysm
⭐️ Reputation: 401
🛠 State: resolved
💼 Team: Discourse
💵 Bounty: 1024
🕐 Submitted: 2025-10-26
⏰ Disclosed: 2026-06-30 02:28:06
📝 Summary: A Denial of Service (DoS) vulnerability was identified in the /drafts.json endpoint on the Discourse forum. Large payloads (around 800,000 characters or more) submitted to create drafts caused the server to process the request, return a 502 Bad Gateway error, but still save the draft. Submitting multiple such large drafts led to significant server delays, with response times exceeding 32 seconds, indicating resource exhaustion.
📂 Report JSON File: 3400140
@hackeronereports