Read the docs
TI-2004-02509 Aliases CVE-2004-2639GHSA-33w2-v4x9-r4gw

Unspecified vulnerability in Journalness 3.0.7 and earlier allows remote attackers to…

Priority LOW 36Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Unspecified vulnerability in Journalness 3.0.7 and earlier allows remote attackers to create or modify posts via unknown attack vectors.

Why it matters now

EPSS 0.01549 75th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 16

CPEVersionsRoleVendor
cpe:2.3:a:drew_withers:journalness:1.11:*:*:*:*:*:*:*1.11VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:1.12:*:*:*:*:*:*:*1.12VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:1.12_r1:*:*:*:*:*:*:*1.12_r1VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:1.13:*:*:*:*:*:*:*1.13VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:1.13_r1:*:*:*:*:*:*:*1.13_r1VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:2.1:*:*:*:*:*:*:*2.1VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:2.1.1:*:*:*:*:*:*:*2.1.1VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:2.1.2:*:*:*:*:*:*:*2.1.2VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:2.1.4:*:*:*:*:*:*:*2.1.4VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:3.0.0:*:*:*:*:*:*:*3.0.0VulnerableDrew Withers
  • cpe:2.3:a:drew_withers:journalness:1.11:*:*:*:*:*:*:* Versions 1.11 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:1.12:*:*:*:*:*:*:* Versions 1.12 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:1.12_r1:*:*:*:*:*:*:* Versions 1.12_r1 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:1.13:*:*:*:*:*:*:* Versions 1.13 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:1.13_r1:*:*:*:*:*:*:* Versions 1.13_r1 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:2.1.4:*:*:*:*:*:*:* Versions 2.1.4 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·Drew Withers
Show 6 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:drew_withers:journalness:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:3.0.2:*:*:*:*:*:*:*3.0.2VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:3.0.3:*:*:*:*:*:*:*3.0.3VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:3.0.4:*:*:*:*:*:*:*3.0.4VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:3.0.5:*:*:*:*:*:*:*3.0.5VulnerableDrew Withers
cpe:2.3:a:drew_withers:journalness:3.0.7:*:*:*:*:*:*:*3.0.7VulnerableDrew Withers
  • cpe:2.3:a:drew_withers:journalness:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:3.0.4:*:*:*:*:*:*:* Versions 3.0.4 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:3.0.5:*:*:*:*:*:*:* Versions 3.0.5 Vulnerable ·Drew Withers
  • cpe:2.3:a:drew_withers:journalness:3.0.7:*:*:*:*:*:*:* Versions 3.0.7 Vulnerable ·Drew Withers

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2004-2639
  2. 2026-10-03 Alias added: GHSA-33w2-v4x9-r4gw

References

Patch 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences