Skip to content
OpenAdvisories

Product · Mereithhh

vanblog

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    VanBlog through 0.54.0 Private Article Disclosure via Public Password Endpoint

    VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read private and hidden articles via the POST /api/public/article/:id endpoint. Attackers can submit any non-empty password for private articles l…