CVE-2026-100621

Capgo capgo.app contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch is available at the time of publication. The enforceencryptedbundletrigger / checkencryptedbundleoninsert content lock in supabase/schemas/prod.sql exempts appversions rows whose...

EUVD-2026-87716

Capgo capgo.app contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch is available at the time of publication. The enforceencryptedbundletrigger / checkencryptedbundleoninsert content lock in supabase/schemas/prod.sql exempts appversions rows whose...

CVE-2026-100621 capgo.app Content-Lock Bypass via r2-direct Bundle Mutation

Capgo capgo.app contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch is available at the time of publication. The enforceencryptedbundletrigger / checkencryptedbundleoninsert content lock in supabase/schemas/prod.sql exempts appversions rows whose...

CVE-2026-100621 capgo.app Content-Lock Bypass via r2-direct Bundle Mutation

Capgo capgo.app contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch is available at the time of publication. The enforceencryptedbundletrigger / checkencryptedbundleoninsert content lock in supabase/schemas/prod.sql exempts appversions rows whose...

CVE-2026-16604

The Passster (also known as Content Protector ) WordPress plugin versions prior to 4.3.6 is vulnerable to unauthenticated protected content disclosure . The root cause is that the plugin outputs password-protected block content in the public page response before performing password verification. ...

EUVD-2026-45057

Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, the content-locking feature returned lock information without checking the requesting user's access permissions. Kirby's Panel includes a content-locking feature that records which user currently has a model...

EUVD-2012-2062

Malware in sbrugna...

PT-2022-9386 · Crafter +3 · Crafter Cms +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A logged-in and authenticated user with a Reviewer Role may lock a content item. There is no information provided about the estimated number of...

Drupal Content Lock模块跨站请求伪造漏洞

Bugtraq ID:65835 Drupal是一套开放源码的内容管理平台。 Drupal Content Lock存在跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 0 Drupal Content Lock 6.x Drupal Content Lock 7.x 目前没有详细解决方案提供： http://drupal.org/project/contentlock...

SA-CONTRIB-2014-024 - Content Lock - CSRF

This module prevents people from editing the same content at the same time. It adds a locking layer to nodes. It does not protect from CSRF. CVE identifiers issued ACVE identifier will be requested, and added upon issuance, in accordance with Drupal Security Team processes. Versions affected All...

CVE-2012-2056

Cross-site request forgery CSRF vulnerability in the Content Lock module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Content Lock module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-2056

Cross-site request forgery CSRF vulnerability in the Content Lock module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-2056

Content Lock (Drupal) is affected by a CSRF vulnerability due to the module not using a token for unlocking content, enabling an attacker to hijack the authentication of victims via CSRF vectors described in the Drupal advisory. Affected versions: all Content Lock releases. Exploitation details a...

CVE-2012-2056

Cross-site request forgery CSRF vulnerability in the Content Lock module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-2056: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Content Lock module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2012-3770

Name of the Vulnerable Software and Affected Versions Drupal affected versions not specified Description A cross-site request forgery CSRF issue in the Content Lock module for Drupal enables remote attackers to hijack the authentication of unspecified victims via unknown vectors. Recommendations ...

SA-CONTRIB-2012-036 - Multiple Modules Unsupported

CVE: CVE-2012-2056 Content Lock Is a module that prevents users from concurrent editing of nodes. This module does not use a token for unlocking a content lock. This leads to a CSRF attack vector. CVE: CVE-2012-2057 Ubercart Bulk Stock Updater is an extension module for Ubercart 2.x running on...