publify

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

publify records in CISA KEV

No publify vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Publify 2 records MEDIUM Publify Core 1 record MEDIUM

Records

12 records

TI-2023-00284 CVE-2023-0299 · GHSA-q3rm-f527-ghxj

Improper Input Validation in publify/publify

HIGH 76

Improper Input Validation in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00935 Published 2023-01-14 Fixed in 9.2.10 CWE-20

TI-2022-01678 CVE-2022-1812 · GHSA-rc42-jghf-vr8f

Integer Overflow or Wraparound in publify/publify

HIGH 76

Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30778 Published 2023-01-14 Fixed in 9.2.10 CWE-190

TI-2023-00540 CVE-2023-0569 · GHSA-g7gf-2rqw-5rwx

Weak Password Requirements in publify/publify

MEDIUM 64

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.007 Published 2023-01-29 Fixed in 9.2.10 CWE-521

TI-2022-02609 CVE-2022-2815 · GHSA-79wq-g4v9-gfj4

Insecure Storage of Sensitive Information in publify/publify

MEDIUM 62

Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00579 Published 2023-01-14 Fixed in 9.2.10 CWE-922

TI-2024-26267 CVE-2024-39311 · GHSA-8fm5-gg2f-f66q

Publify Vulnerable To Cross-Site Scripting (XSS) Via Redirects Requiring User Interaction

MEDIUM 43

Publify is a self hosted Web publishing platform on Rails.

CVSS 4.0LOW 1.8 Network High privileges User interaction EPSS 0.00271 Published 2025-03-28 Fixed in 10.0.1, 10.0.2 CWE-79

TI-2022-00444 CVE-2022-0524 · GHSA-x3rq-r3cm-5vc4

Business Logic Errors in publify/publify

LOW 36

Business Logic Errors in GitHub repository publify/publify prior to 9.2.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01567 Published 2022-02-08 Fixed in 9.2.7 CWE-840

TI-2014-02574 CVE-2014-3211 · GHSA-vq74-9583-hrm4

Publify before 8.0.1 is vulnerable to a Denial of Service attack

LOW 35

Publify before 8.0.1 is vulnerable to a Denial of Service attack

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01083 Published 2020-01-09 Fixed in 8.0.1 CWE-400

TI-2022-00496 CVE-2022-0578 · GHSA-w78q-4w34-jrjx

Code Injection in publify/publify

LOW 31

Code Injection in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00912 Published 2022-05-16 Fixed in 9.2.8 CWE-94

TI-2022-00492 CVE-2022-0574 · GHSA-79m3-q3wh-c3qm

Improper Access Control in publify/publify

LOW 30

Improper Access Control in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00841 Published 2022-05-16 Fixed in 9.2.8 CWE-284

TI-2022-01677 CVE-2022-1811 · GHSA-3hwx-c6cp-q972

Unrestricted Upload of File with Dangerous Type in publify/publify

LOW 26

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00765 Published 2022-05-23 Fixed in 9.2.9 CWE-434

TI-2022-01424 CVE-2022-1553 · GHSA-5jm7-g527-m694

Leaking password protected articles content due to improper access control in publify/publify

LOW 25

Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01246 Published 2022-05-16 Fixed in 9.2.8 CWE-284

TI-2022-01676 CVE-2022-1810 · GHSA-c273-c6vg-4pv5

Authorization Bypass Through User-Controlled Key in publify/publify

LOW 22

Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0084 Published 2022-05-23 Fixed in 9.2.9 CWE-639

Open these records in search →

Critical	2
High	2
Medium	7
Low	1
No CVSS	0