Publify Business Logic Errors

ALTO 7.5CVE-2022-0524 · BIT-publify-2022-0524 · GHSA-x3rq-r3cm-5vc4 · Published 08/02/2022 · updated 17/06/2026

In breve

CVE-2022-0524 è una vulnerabilità ALTO (CVSS 7.5) che riguarda publify_core, publify (publify project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.6%, superiore al 75.3% delle vulnerabilità.
Correzione: aggiornare a 9.2.7 o successiva.

Package	Affected versions	Patched versions
publify_core RubyGems	`< 9.2.7`	`9.2.7`
publify publify_project	`< 9.2.7`	`9.2.7`

Publify (formerly known as Typo) prior to version 9.2.7 is vulnerable to business logic errors.

NVD description

Business Logic Errors in GitHub repository publify/publify prior to 9.2.7.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

RubyGems

< 9.2.7

9.2.7

< 9.2.7

9.2.7

Altre vulnerabilità di publify_core

Vedi tutto →