Lucene search
Veracode Vulnerability DatabaseVERACODE:32791HistoryNov 03, 2021 - 3:02 a.m.
Privilege Escalation
2021-11-0303:02:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
publify_core
privilege escalation
vulnerability
front-end restrictions
guest role
self-register
admin disallow
EPSS
0.001
Percentile
31.3%
publify_core is vulnerable to privilege escalation. The vulnerability exists due to the front-end restrictions. A malicious user with a guest role can self-register, even if the admin does not allow it.
Related
osv
osv
CVE-2021-25973
2021-11-02 07:15:07
Publify `guest` role users can self-register even when the admin does not allow it
2021-11-03 17:34:22
BIT-publify-2021-25973
2024-03-06 11:04:39
nvd
nvd
CVE-2021-25973
2021-11-02 07:15:07
cvelist
cvelist
rubygems
rubygems
Improper Authorization in Publify
2021-11-02 21:00:00
prion
prion
Improper access control
2021-11-02 07:15:00
github
github
cve
cve
CVE-2021-25973
2021-11-02 07:15:07