Publify

11 CVEs across 3 Publify products. Browse Publify vulnerabilities, severities, and proof-of-concept exploits.

Publify products with known CVEs

ProductCVEs
Publify/publify10
Publify2
Publify Core1
Publify CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-39311Medium5.42025-03-28Publify is a self hosted Web publishing platform on Rails. Prior to version 10.0.1 of Publify, corresponding to versions prior to 10.0.2 of the `publify_core`…
CVE-2023-0569Medium6.52023-01-29Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10.
CVE-2023-0299Critical9.82023-01-14Improper Input Validation in GitHub repository publify/publify prior to 9.2.10.
CVE-2022-2815Medium6.52023-01-14Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10.
CVE-2022-1812Critical9.82023-01-14Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10.
CVE-2022-1811Medium5.42022-05-23Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9.
CVE-2022-1810Medium4.32022-05-23Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9.
CVE-2022-1553Medium4.92022-05-16Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vul…
CVE-2022-0578Medium6.52022-05-16Code Injection in GitHub repository publify/publify prior to 9.2.8.
CVE-2022-0574Medium6.52022-05-16Improper Access Control in GitHub repository publify/publify prior to 9.2.8.
CVE-2022-0524High7.52022-02-08Business Logic Errors in GitHub repository publify/publify prior to 9.2.7.
CVE-2014-3211High7.52020-01-09Publify before 8.0.1 is vulnerable to a Denial of Service attack