6 matches found
CVE-2026-119763
changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostController, NewsIssueController and NewsItemController. Attackers can enumerate hashid post IDs, sequential newsletter...
CVE-2026-119763 changelog.com before commit 7b35e829 Missing Authorization via Preview Routes
changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostController, NewsIssueController and NewsItemController. Attackers can enumerate hashid post IDs, sequential newsletter...
EUVD-2026-114240
changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostController, NewsIssueController and NewsItemController. Attackers can enumerate hashid post IDs, sequential newsletter...
CVE-2026-119763
The software changelog.com (prior to commit 7b35e829 ) is susceptible to a missing authorization vulnerability (CWE-862). This flaw allows unauthenticated attackers to access unpublished content through preview routes within the PostController , NewsIssueController , and NewsItemController . By e...
CVE-2026-119763 changelog.com before commit 7b35e829 Missing Authorization via Preview Routes
changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostController, NewsIssueController and NewsItemController. Attackers can enumerate hashid post IDs, sequential newsletter...
CVE-2026-119763: thechangelog changelog.com: changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated…
changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostController, NewsIssueController and NewsItemController. Attackers can enumerate hashid post IDs, sequential newsletter...