Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 13

Export CSV
CVE-2021-25973

Publify - Improper Authorization Leads to Guest Signup Restriction Bypass

In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end restriction only.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Publify Project
Products
Publify
CVE-2021-25974

Publify - Stored Cross-Site Scripting (XSS) in Editor

In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS. A user with a “publisher” role is able to inject and execute arbitrary JavaScript code while creating a page/article.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Publify Project
Products
Publify
CVE-2021-25975

Publify - Stored Cross-Site Scripting (XSS) due to Unrestricted File Upload

In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload. This issue allows a user with “publisher” role to inject malicious JavaScript via the uploaded html file.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Publify Project
Products
Publify
CVE-2023-0299

Improper Input Validation in publify/publify

Improper Input Validation in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Publify Project
Products
Publify
CVE-2022-1812

Integer Overflow or Wraparound in publify/publify

Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1 · 9.8 Critical EPSS 30.8% KEV · Not listed
Vendors
Publify Project
Products
Publify
CVE-2022-2815

Insecure Storage of Sensitive Information in publify/publify

Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Publify Project
Products
Publify
CVE-2023-0569

Weak Password Requirements in publify/publify

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Publify Project
Products
Publify
CVE-2022-1811

Unrestricted Upload of File with Dangerous Type in publify/publify

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Publify Project
Products
Publify
CVE-2022-1810

Authorization Bypass Through User-Controlled Key in publify/publify

Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Publify Project
Products
Publify
CVE-2022-1553

Leaking password protected articles content due to improper access control in publify/publify

Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected article present on the publify website, compromising confidentiality and integrity of users.

CVSS 3.1 · 4.9 Medium EPSS 1.2% KEV · Not listed
Vendors
Publify Project
Products
Publify
CVE-2022-0578

Code Injection in publify/publify

Code Injection in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Publify Project
Products
Publify
CVE-2022-0574

Improper Access Control in publify/publify

Improper Access Control in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Publify Project
Products
Publify
CVE-2022-0524

Business Logic Errors in publify/publify

Business Logic Errors in GitHub repository publify/publify prior to 9.2.7.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Publify Project
Products
Publify