CVSS 3.1
4.9 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NCVE-2022-1553
Medium (4.9) in publify project publify. EPSS 1.2% chance of exploitation in the next 30 days. Fixed in publify_core 9.2.8.
Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected article present on the publify website, compromising confidentiality and integrity of users.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-863, CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- publify_project:publify
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-5jm7-g527-m694 | RubyGems | publify_core | <9.2.8 | 9.2.8 |