ADVISORIES

• CVE-2022-0574 (NVD)
• GHSA-79m3-q3wh-c3qm
• Vendor Advisory

GEM

publify_core

SEVERITY

CVSS v3.x: 6.5 (Medium)

PATCHED VERSIONS

• >= 9.2.8

DESCRIPTION

Improper Access Control in GitHub repository publify/publify prior to 9.2.8. Anonymous users can't view but can leave comments on an article in draft mode.

RELATED

• https://huntr.dev/bounties/6f322c84-9e20-4df6-97e8-92bc271ede3f