Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68880
HistoryMay 18, 2022 - 12:00 a.m.

Publify Information Disclosure Vulnerability

2022-05-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.001 Low

EPSS

Percentile

26.3%

Publify is a simple but full-featured web publishing software.An information disclosure vulnerability exists in versions of Publify prior to 9.2.8. The vulnerability stems from the content of an article revealing a password in the response meta tag, which could be exploited by an attacker to view the content of any password-protected article present on the publishing site, compromising the confidentiality and integrity of the user.

CPENameOperatorVersion
publify publifylt9.2.8

0.001 Low

EPSS

Percentile

26.3%