Publify Incorrect Authorization

MEDIO 6.5CVE-2022-0574 · BIT-publify-2022-0574 · GHSA-79m3-q3wh-c3qm · Published 16/05/2022 · updated 17/06/2026

En resumen

CVE-2022-0574 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a publify_core, publify (publify project).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.84%, mayor que el 57.9% de las vulnerabilidades.
Solución: actualizar a 9.2.8 o posterior.

Package	Affected versions	Patched versions
publify_core RubyGems	`< 9.2.8`	`9.2.8`
publify publify_project	`< 9.2.8`	`9.2.8`

Description

Improper Access Control in GitHub repository publify/publify prior to 9.2.8. Anonymous users can't view but can leave comments on an article in draft mode.

NVD description

Improper Access Control in GitHub repository publify/publify prior to 9.2.8.

References

nvd.nist.gov/vuln/detail/CVE-2022-0574 · ADVISORY
publify/publify commit 0e6c66a · WEB
publify/publify · PACKAGE
rubysec/ruby-advisory-db · WEB
huntr.dev/bounties/6f322c84-9e20-4df6-97e8-92bc271ede3f · WEB

Más vulnerabilidades de publify_core

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

publify_core

RubyGems

< 9.2.8

9.2.8

publify

publify_project

< 9.2.8

9.2.8

Más vulnerabilidades de publify_core

Ver todo →