Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68880
HistoryMay 18, 2022 - 12:00 a.m.

Publify Information Disclosure Vulnerability

2022-05-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
publify
information disclosure
vulnerability
web publishing
password exposure
attack
confidentiality
integrity
cnvd

EPSS

0.001

Percentile

26.1%

Publify is a simple but full-featured web publishing software.An information disclosure vulnerability exists in versions of Publify prior to 9.2.8. The vulnerability stems from the content of an article revealing a password in the response meta tag, which could be exploited by an attacker to view the content of any password-protected article present on the publishing site, compromising the confidentiality and integrity of the user.

EPSS

0.001

Percentile

26.1%