244 matches found
BIT-PUBLIFY-2021-25973
In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end restriction only...
BIT-PUBLIFY-2021-25974
In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS. A user with a “publisher” role is able to inject and execute arbitrary JavaScript code while creating a page/article...
BIT-PUBLIFY-2021-25975
In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload. This issue allows a user with “publisher” role to inject malicious JavaScript via the uploaded html file...
BIT-PUBLIFY-2022-0524
Business Logic Errors in GitHub repository publify/publify prior to 9.2.7...
BIT-PUBLIFY-2022-0574
Improper Access Control in GitHub repository publify/publify prior to 9.2.8...
BIT-PUBLIFY-2022-0578
Code Injection in GitHub repository publify/publify prior to 9.2.8...
BIT-PUBLIFY-2022-1553
Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected article present on the publify website, compromising confidentiality and integri...
BIT-PUBLIFY-2022-1811
Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9...
BIT-PUBLIFY-2022-1812
Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10...
BIT-PUBLIFY-2023-0299
Improper Input Validation in GitHub repository publify/publify prior to 9.2.10...
Weak Password Requirements
Overview publifycore is a Core engine for the Publify blogging system, formerly known as Typo. Affected versions of this package are vulnerable to Weak Password Requirements. The password can easily be cracked using a dictionary attack. Remediation Upgrade publifycore to version 9.2.10 or higher...
Publify contains Weak Password Requirements
Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...
GHSA-G7GF-2RQW-5RWX Publify contains Weak Password Requirements
Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...
CVE-2023-0569
Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...
Default credentials
Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...
CVE-2023-0569
Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...
CVE-2023-0569
CVE-2023-0569 affects publify/publify prior to version 9.2.10. The issue is described as weak password requirements in the GitHub repository Publify. Affected component: authentication/password policy within Publify. Impact noted in multiple feeds as a security vulnerability allowing weak passwor...
CVE-2023-0569 Weak Password Requirements in publify/publify
Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...
