En bref
- CVE-2022-1553 est une vulnérabilité MOYENNE (CVSS 4.9) touchant publify_core, publify (publify project).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.2%, plus élevée que 69.3% des vulnérabilités.
- Correctif : mettre à jour vers 9.2.8 ou plus récent.
Description
Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected article present on the publify website, compromising confidentiality and integrity of users.
NVD description
Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected article present on the publify website, compromising confidentiality and integrity of users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free