CVE-2022-0574

Improper Access Control in GitHub repository publify/publify prior to 9.2.8...

CVE-2022-0578

Code Injection in GitHub repository publify/publify prior to 9.2.8...

Improper access control

Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected article present on the publify website, compromising confidentiality and integri...

Code injection

Code Injection in GitHub repository publify/publify prior to 9.2.8...

Improper access control

Improper Access Control in GitHub repository publify/publify prior to 9.2.8...

CVE-2022-1553

CVE-2022-1553 affects Publify (publify/publify) prior to 9.2.8. The vulnerability arises from improper access control that can disclose the contents of password‑protected articles, compromising confidentiality and integrity. Documents consistently describe information disclosure via article conte...

CVE-2022-1553 Leaking password protected articles content due to improper access control in publify/publify

Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected article present on the publify website, compromising confidentiality and integri...

CVE-2022-1553 Leaking password protected articles content due to improper access control in publify/publify

Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected article present on the publify website, compromising confidentiality and integri...

CVE-2022-0578

The CVE-2022-0578 entry relates to a code injection vulnerability in Publify/publify prior to version 9.2.8. Affected software is Publify (GitHub repository publify/publify). The connected records consistently describe it as a code injection issue but do not provide concrete details on the root c...

CVE-2022-0578 Code Injection in publify/publify

Code Injection in GitHub repository publify/publify prior to 9.2.8...

CVE-2022-0578 Code Injection in publify/publify

Code Injection in GitHub repository publify/publify prior to 9.2.8...

CVE-2022-0574 Improper Access Control in publify/publify

Improper Access Control in GitHub repository publify/publify prior to 9.2.8...

CVE-2022-0574

Summary: CVE-2022-0574 affects Publify (publify/publify) prior to version 9.2.8 and is due to improper access control. The vulnerability allows anonymous users to leave comments on articles in draft mode, which should not be possible. The available documents describe the issue as an access‑contro...

CVE-2022-0574 Improper Access Control in publify/publify

Improper Access Control in GitHub repository publify/publify prior to 9.2.8...

PT-2022-13270 · Publify · Publify

Name of the Vulnerable Software and Affected Versions: publify/publify versions prior to 9.2.8 Description: The issue concerns improper access control in the GitHub repository publify/publify. It allows anonymous users to leave comments on articles in draft mode, even though they cannot view thes...

Publify 安全漏洞

Publify is a simple but full-featured web publishing software.An information disclosure vulnerability exists in versions of Publify prior to 9.2.8. The vulnerability stems from the content of an article revealing a password in the response meta tag, which could be exploited by an attacker to view...

PT-2022-13953 · Publify · Publify

Name of the Vulnerable Software and Affected Versions: publify versions prior to 9.2.8 Description: The issue is related to improper access control in the GitHub repository, allowing attackers to view the contents of password-protected articles on the publify website. This compromises the...

Publify 安全漏洞

Publify is a simple but full-featured web publishing software.A code injection vulnerability exists in versions of Publify prior to 9.2.8, which stems from the existence of a code injection vulnerability, for which no detailed vulnerability details are currently available...

PT-2022-13274 · Publify · Publify

Name of the Vulnerable Software and Affected Versions: publify/publify versions prior to 9.2.8 Description: The issue is related to code injection in the GitHub repository publify/publify. Recommendations: For versions prior to 9.2.8, update to version 9.2.8 or later to resolve the issue...

Publify 安全漏洞

Publify is a simple but full-featured web publishing software.An access control error vulnerability exists in versions of Publify prior to 9.2.8. The vulnerability stems from an access control error in draft mode, which could be exploited by an attacker to comment on articles in draft mode...