Publify Project
Publify Project Publify: vulnerabilidades y CVE
Publify Project Publify tiene 13 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE13
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-0569 | Media (6.5) | 0.70% | — | 29 ene 2023 | Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10. |
| CVE-2023-0299 | Crítica (9.8) | 0.91% | — | 14 ene 2023 | Improper Input Validation in GitHub repository publify/publify prior to 9.2.10. |
| CVE-2022-2815 | Media (6.5) | 0.56% | — | 14 ene 2023 | Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10. |
| CVE-2022-1812 | Crítica (9.8) | 31% | — | 14 ene 2023 | Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10. |
| CVE-2022-1811 | Media (5.4) | 0.75% | — | 23 may 2022 | Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9. |
| CVE-2022-1810 | Media (4.3) | 0.83% | — | 23 may 2022 | Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9. |
| CVE-2022-1553 | Media (4.9) | 1.2% | — | 16 may 2022 | Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected… |
| CVE-2022-0578 | Media (6.5) | 0.90% | — | 16 may 2022 | Code Injection in GitHub repository publify/publify prior to 9.2.8. |
| CVE-2022-0574 | Media (6.5) | 0.83% | — | 16 may 2022 | Improper Access Control in GitHub repository publify/publify prior to 9.2.8. |
| CVE-2022-0524 | Alta (7.5) | 1.6% | — | 8 feb 2022 | Business Logic Errors in GitHub repository publify/publify prior to 9.2.7. |
| CVE-2021-25975 | Media (5.4) | 0.60% | — | 10 nov 2021 | In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload. This issue allows a user with “publisher” role to inject malicious JavaScript via the uploaded html file. |
| CVE-2021-25974 | Media (5.4) | 0.60% | — | 10 nov 2021 | In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS. A user with a “publisher” role is able to inject and execute arbitrary JavaScript code while creating a page/article. |
| CVE-2021-25973 | Media (6.5) | 0.83% | — | 2 nov 2021 | In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end restriction only. |