Vulnerabilities

TI-2022-01424 CVE-2022-1553 · GHSA-5jm7-g527-m694

Leaking password protected articles content due to improper access control in publify/publify

LOW 25

Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01246 Published 2022-05-16 Fixed in 9.2.8 CWE-284

TI-2022-00496 CVE-2022-0578 · GHSA-w78q-4w34-jrjx

LOW 31

Code Injection in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00912 Published 2022-05-16 Fixed in 9.2.8 CWE-94

TI-2022-00492 CVE-2022-0574 · GHSA-79m3-q3wh-c3qm

LOW 30

Improper Access Control in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00841 Published 2022-05-16 Fixed in 9.2.8 CWE-284