Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-1810

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-c273-c6vg-4pv5

Publify has Improper Access Controls A low-privileged user can modify and delete admin articles by changing the value of the `article[id]` parameter prior to 9.2.9.

gitlab/gem/publify_core/CVE-2022-1810

Incorrect Permission Assignment for Critical Resource A low-privileged user can modify and delete admin articles just by changing the value of the `article[id]` parameter.