Lucene search

K
rubygemsRubySecRUBY:PUBLIFY_CORE-2023-0299
HistoryJan 13, 2023 - 9:00 p.m.

Publify Improper Input Validation vulnerability

2023-01-1321:00:00
RubySec
github.com
2
input validation
publify
github
software security

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Input Validation in GitHub repository publify/publify prior
to 9.2.10.

Affected configurations

Vulners
Node
rubypublify_coreRange9.2.10
VendorProductVersionCPE
rubypublify_core*cpe:2.3:a:ruby:publify_core:*:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Related for RUBY:PUBLIFY_CORE-2023-0299