Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35569
HistoryMay 17, 2022 - 7:55 a.m.

Information Disclosure

2022-05-1707:55:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
information disclosure
show_article function
meta tags
password-protected articles
software

EPSS

0.001

Percentile

26.1%

publify_core is vulnerable to information disclosure. The vulnerability exists in show_article function in articles_controller.rb because the content of the article in meta tags of a response is not properly restricted which allows an attacker to view the contents of password-protected articles.

EPSS

0.001

Percentile

26.1%