Skip to content
OpenAdvisories

Product · b3log

Symphony

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-110105

    B3log Symphony through 3.6.4 Missing Authorization in Admin Console Routes

    B3log Symphony through 3.6.4 contains a missing authorization vulnerability that allows unauthenticated attackers to reach admin routes because PermissionMidware.check permits routes lacking permission.rule.url entries. Attackers can request /admin/report/ign…

    b3log Symphony