6 matches found
EUVD-2026-120539
VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read private and hidden articles via the POST /api/public/article/:id endpoint. Attackers can submit any non-empty password for private articles lacking an effective password, or reque...
CVE-2026-125376
VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read private and hidden articles via the POST /api/public/article/:id endpoint. Attackers can submit any non-empty password for private articles lacking an effective password, or reque...
CVE-2026-125376: Mereithhh vanblog: VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read…
VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read private and hidden articles via the POST /api/public/article/:id endpoint. Attackers can submit any non-empty password for private articles lacking an effective password, or reque...
CVE-2026-125376 VanBlog through 0.54.0 Private Article Disclosure via Public Password Endpoint
VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read private and hidden articles via the POST /api/public/article/:id endpoint. Attackers can submit any non-empty password for private articles lacking an effective password, or reque...
CVE-2026-125376
VanBlog versions through 0.54.0 are vulnerable to an information disclosure vulnerability. An unauthenticated attacker can read private and hidden articles by accessing the POST /api/public/article/:id endpoint. The root cause is that the getByIdWithPassword function fails to check the hidden fla...
PT-2026-141199
VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read private and hidden articles via the POST /api/public/article/:id endpoint. Attackers can submit any non-empty password for private articles lacking an effective password, or reque...