Vulnerabilities

TI-2024-26267 CVE-2024-39311 · GHSA-8fm5-gg2f-f66q

Publify Vulnerable To Cross-Site Scripting (XSS) Via Redirects Requiring User Interaction

MEDIUM 43

Publify is a self hosted Web publishing platform on Rails.

CVSS 4.0LOW 1.8 Network High privileges User interaction EPSS 0.00271 Published 2025-03-28 Fixed in 10.0.1, 10.0.2 CWE-79

TI-2023-00540 CVE-2023-0569 · GHSA-g7gf-2rqw-5rwx

Weak Password Requirements in publify/publify

MEDIUM 64

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.007 Published 2023-01-29 Fixed in 9.2.10 CWE-521

TI-2023-00284 CVE-2023-0299 · GHSA-q3rm-f527-ghxj

Improper Input Validation in publify/publify

HIGH 76

Improper Input Validation in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00935 Published 2023-01-14 Fixed in 9.2.10 CWE-20

TI-2022-02609 CVE-2022-2815 · GHSA-79wq-g4v9-gfj4

Insecure Storage of Sensitive Information in publify/publify

MEDIUM 62

Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00579 Published 2023-01-14 Fixed in 9.2.10 CWE-922

TI-2022-01678 CVE-2022-1812 · GHSA-rc42-jghf-vr8f

Integer Overflow or Wraparound in publify/publify

HIGH 76

Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30778 Published 2023-01-14 Fixed in 9.2.10 CWE-190

TI-2022-01677 CVE-2022-1811 · GHSA-3hwx-c6cp-q972

Unrestricted Upload of File with Dangerous Type in publify/publify

LOW 26

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00765 Published 2022-05-23 Fixed in 9.2.9 CWE-434

TI-2022-01676 CVE-2022-1810 · GHSA-c273-c6vg-4pv5

Authorization Bypass Through User-Controlled Key in publify/publify

LOW 22

Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0084 Published 2022-05-23 Fixed in 9.2.9 CWE-639

TI-2022-01424 CVE-2022-1553 · GHSA-5jm7-g527-m694

Leaking password protected articles content due to improper access control in publify/publify

LOW 25

Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01246 Published 2022-05-16 Fixed in 9.2.8 CWE-284

TI-2022-00496 CVE-2022-0578 · GHSA-w78q-4w34-jrjx

Code Injection in publify/publify

LOW 31

Code Injection in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00912 Published 2022-05-16 Fixed in 9.2.8 CWE-94

TI-2022-00492 CVE-2022-0574 · GHSA-79m3-q3wh-c3qm

Improper Access Control in publify/publify

LOW 30

Improper Access Control in GitHub repository publify/publify prior to 9.2.8.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00841 Published 2022-05-16 Fixed in 9.2.8 CWE-284

TI-2022-00444 CVE-2022-0524 · GHSA-x3rq-r3cm-5vc4

Business Logic Errors in publify/publify

LOW 36

Business Logic Errors in GitHub repository publify/publify prior to 9.2.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01567 Published 2022-02-08 Fixed in 9.2.7 CWE-840

TI-2014-02574 CVE-2014-3211 · GHSA-vq74-9583-hrm4

Publify before 8.0.1 is vulnerable to a Denial of Service attack

LOW 35

Publify before 8.0.1 is vulnerable to a Denial of Service attack

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01083 Published 2020-01-09 Fixed in 8.0.1 CWE-400

Vulnerabilities

Filters