Lucene search
GoogleOSV:GHSA-X24J-87X9-JVV5HistoryNov 03, 2021 - 5:34 p.m.
Publify `guest` role users can self-register even when the admin does not allow it
2021-11-0317:34:22
Google
osv.dev
7
publify
software
'guest' role
self-register
admin restrictions
improper access control
EPSS
0.001
Percentile
31.3%
In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. guest role users can self-register even when the admin does not allow it. This happens due to front-end restriction only.
Related
osv
osv
CVE-2021-25973
2021-11-02 07:15:07
BIT-publify-2021-25973
2024-03-06 11:04:39
nvd
nvd
CVE-2021-25973
2021-11-02 07:15:07
cvelist
cvelist
veracode
veracode
Privilege Escalation
2021-11-03 03:02:05
rubygems
rubygems
Improper Authorization in Publify
2021-11-02 21:00:00
prion
prion
Improper access control
2021-11-02 07:15:00
cve
cve
CVE-2021-25973
2021-11-02 07:15:07
github
github