Skip to content
OpenAdvisories

Vendor

b3log

2 known vulnerabilities.

Products

Solo 1 Symphony 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-111610

    B3log Solo through 4.4.0 Missing Authorization in ArticleConsole

    B3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allows authenticated authors to access other authors' articles by omitting per-author ownership checks. Attackers can query the console articles status endpoint to …

    b3log Solo
  • Medium 5.3
    CVE-2026-110105

    B3log Symphony through 3.6.4 Missing Authorization in Admin Console Routes

    B3log Symphony through 3.6.4 contains a missing authorization vulnerability that allows unauthenticated attackers to reach admin routes because PermissionMidware.check permits routes lacking permission.rule.url entries. Attackers can request /admin/report/ign…

    b3log Symphony