Lucene search
K

6 matches found

CVE
CVE
added 2026/01/19 6:8 p.m.9 views

CVE-2026-23878

HotCRP vulnerability CVE-2026-23878: Affects HotCRP conference review software where, from commit aa20ef288828b04550950cf67c831af8a525f508 to before commit ceacd5f1476458792c44c6a993670f02c984b4a0, authors with at least one submission on a site could use the document API to download any submissio...

6.5CVSS5.4AI score0.00056EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/19 6:8 p.m.3 views

CVE-2026-23878

HotCRP is conference review software. Starting in commit aa20ef288828b04550950cf67c831af8a525f508 and prior to commit ceacd5f1476458792c44c6a993670f02c984b4a0, authors with at least one submission on a HotCRP site could use the document API to download any documents PDFs, attachments associated...

6.5CVSS5.3AI score0.00056EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/19 6:8 p.m.23 views

CVE-2026-23878 HotCRP vulnerable to exposure of submitted documents

HotCRP is conference review software. Starting in commit aa20ef288828b04550950cf67c831af8a525f508 and prior to commit ceacd5f1476458792c44c6a993670f02c984b4a0, authors with at least one submission on a HotCRP site could use the document API to download any documents PDFs, attachments associated...

6.5CVSS0.00056EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/19 6:8 p.m.3 views

CVE-2026-23878 HotCRP vulnerable to exposure of submitted documents

HotCRP is conference review software. Starting in commit aa20ef288828b04550950cf67c831af8a525f508 and prior to commit ceacd5f1476458792c44c6a993670f02c984b4a0, authors with at least one submission on a HotCRP site could use the document API to download any documents PDFs, attachments associated...

6.5CVSS5.4AI score0.00056EPSS
Exploits0References3
OSV
OSV
added 2026/01/19 6:8 p.m.4 views

CVE-2026-23878 HotCRP vulnerable to exposure of submitted documents

HotCRP is conference review software. Starting in commit aa20ef288828b04550950cf67c831af8a525f508 and prior to commit ceacd5f1476458792c44c6a993670f02c984b4a0, authors with at least one submission on a HotCRP site could use the document API to download any documents PDFs, attachments associated...

6.5CVSS5.5AI score0.00056EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/01/19 12:0 a.m.5 views

PT-2026-3478

HotCRP is conference review software. Starting in commit aa20ef288828b04550950cf67c831af8a525f508 and prior to commit ceacd5f1476458792c44c6a993670f02c984b4a0, authors with at least one submission on a HotCRP site could use the document API to download any documents PDFs, attachments associated...

6.5CVSS5.4AI score0.00056EPSS
Exploits0References4
Rows per page
Query Builder