Lucene search
Veracode Vulnerability DatabaseVERACODE:32791HistoryNov 03, 2021 - 3:02 a.m.
Privilege Escalation
2021-11-0303:02:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
26.9%
publify_core is vulnerable to privilege escalation. The vulnerability exists due to the front-end restrictions. A malicious user with a guest role can self-register, even if the admin does not allow it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| publify_core | le | 9.2.4 | |
| publify_core | le | 9.2.4 |
Related
osv
osv
CVE-2021-25973
2021-11-02 07:15:07
Publify `guest` role users can self-register even when the admin does not allow it
2021-11-03 17:34:22
BIT-publify-2021-25973
2024-03-06 11:04:39
nvd
nvd
CVE-2021-25973
2021-11-02 07:15:07
cvelist
cvelist
cve
cve
CVE-2021-25973
2021-11-02 07:15:07
prion
prion
Improper access control
2021-11-02 07:15:00
github
github