Skip to content
OpenAdvisories

Vendor

thechangelog

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.3

    changelog.com before commit 7b35e829 Missing Authorization via Preview Routes

    changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostController, NewsIssueController and NewsItemController. Attackers can enumerate has…