Skip to content
OpenAdvisories

Product · b3log

Solo

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4

    B3log Solo through 4.4.0 Missing Authorization in ArticleConsole

    B3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allows authenticated authors to access other authors' articles by omitting per-author ownership checks. Attackers can query the console articles status endpoint to …