publify_core

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

publify_core records in CISA KEV

No publify_core vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Publify 13 records HIGH

Records

13 records in Publify · all components

TI-2023-00284 CVE-2023-0299 · GHSA-q3rm-f527-ghxj

Improper Input Validation in publify/publify

HIGH 76

Improper Input Validation in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00935 Published 2023-01-14 Fixed in 9.2.10 CWE-20

TI-2022-01678 CVE-2022-1812 · GHSA-rc42-jghf-vr8f

Integer Overflow or Wraparound in publify/publify

HIGH 76

Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30778 Published 2023-01-14 Fixed in 9.2.10 CWE-190

TI-2021-07979 CVE-2021-25973 · GHSA-x24j-87x9-jvv5

Publify - Improper Authorization Leads to Guest Signup Restriction Bypass

HIGH 68

In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00827 Published 2021-11-02 Fixed in 9.2.5 CWE-285

TI-2023-00540 CVE-2023-0569 · GHSA-g7gf-2rqw-5rwx

Weak Password Requirements in publify/publify

MEDIUM 64

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.007 Published 2023-01-29 Fixed in 9.2.10 CWE-521

TI-2022-02609 CVE-2022-2815 · GHSA-79wq-g4v9-gfj4

Insecure Storage of Sensitive Information in publify/publify

MEDIUM 62

Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00579 Published 2023-01-14 Fixed in 9.2.10 CWE-922

TI-2021-07981 CVE-2021-25975 · GHSA-3h7v-wqw7-ff28

Publify - Stored Cross-Site Scripting (XSS) due to Unrestricted File Upload

MEDIUM 58

In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00597 Published 2021-11-10 Fixed in 9.2.5 CWE-79

TI-2021-07980 CVE-2021-25974 · GHSA-wmh9-x28j-c6gr

Publify - Stored Cross-Site Scripting (XSS) in Editor

MEDIUM 58

In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00597 Published 2021-11-10 Fixed in 9.2.5 CWE-79

TI-2022-00444 CVE-2022-0524 · GHSA-x3rq-r3cm-5vc4

Business Logic Errors in publify/publify

LOW 36

Business Logic Errors in GitHub repository publify/publify prior to 9.2.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01567 Published 2022-02-08 Fixed in 9.2.7 CWE-840

TI-2022-00496 CVE-2022-0578 · GHSA-w78q-4w34-jrjx

Code Injection in publify/publify

LOW 31

Code Injection in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00912 Published 2022-05-16 Fixed in 9.2.8 CWE-94

TI-2022-00492 CVE-2022-0574 · GHSA-79m3-q3wh-c3qm

Improper Access Control in publify/publify

LOW 30

Improper Access Control in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00841 Published 2022-05-16 Fixed in 9.2.8 CWE-284

TI-2022-01677 CVE-2022-1811 · GHSA-3hwx-c6cp-q972

Unrestricted Upload of File with Dangerous Type in publify/publify

LOW 26

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00765 Published 2022-05-23 Fixed in 9.2.9 CWE-434

TI-2022-01424 CVE-2022-1553 · GHSA-5jm7-g527-m694

Leaking password protected articles content due to improper access control in publify/publify

LOW 25

Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01246 Published 2022-05-16 Fixed in 9.2.8 CWE-284

TI-2022-01676 CVE-2022-1810 · GHSA-c273-c6vg-4pv5

Authorization Bypass Through User-Controlled Key in publify/publify

LOW 22

Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0084 Published 2022-05-23 Fixed in 9.2.9 CWE-639

Open these records in search →