Cross site scripting in publify

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-25975 · ADVISORY
• publify/publify commit d99c087 · WEB
• publify/publify · PACKAGE
• whitesourcesoftware.com/vulnerability-database/CVE-2021-25974 · WEB

publify_core のその他の脆弱性

• CVE-2024-39311中 5.4Publify is a self hosted Web publishing platform on Rails. Prior to version 10.0.1 of Publify, corresponding to versions prior to 10.0.2 of …
• CVE-2023-0569中 6.5Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10.
• CVE-2023-0299緊急 9.8Improper Input Validation in GitHub repository publify/publify prior to 9.2.10.
• CVE-2022-2815中 6.5Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10.
• CVE-2022-1812緊急 9.8Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10.