Vendor
thechangelog
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.3
changelog.com before commit 7b35e829 Missing Authorization via Preview Routes
changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostController, NewsIssueController and NewsItemController. Attackers can enumerate has…