Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/20 6:04 p.m.•6 views

ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorization

Summary ApostropheCMS enforces per-type authorization on pages: a page type may declare editRole / publishRole the core @apostrophecms/archive-page does, so a project can define restricted subtrees that only higher-privileged roles may create or edit within. The move operation in the...

6.5CVSS6AI score0.00323EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder