TI-2025-08390 CVE-2025-9151 · GHSA-r6rj-8fxj-8pp6
LiuYuYang01 ThriveX-Blog web updateJsonValueByName improper authorization
Priority MEDIUM 57
A security flaw has been discovered in LiuYuYang01 ThriveX-Blog up to 3.1.7.
LiuYuYang01
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
LiuYuYang01 records in CISA KEVNo LiuYuYang01 vulnerabilities are listed in CISA KEV.
Records
2 records
TI-2026-72014 CVE-2026-110131 · GHSA-75r3-hhfq-mmwm
Missing authorization in ThriveX-Server exposes draft articles
Priority LOW 36
ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles.