PT-2022-13274 · Publify · Publify

Mvz · Published 2022-05-16 · Updated 2024-03-06 · CVE-2022-0578

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions publify/publify versions prior to 9.2.8

Description The issue is related to code injection in the GitHub repository publify/publify.

Recommendations For versions prior to 9.2.8, update to version 9.2.8 or later to resolve the issue.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BIT-PUBLIFY-2022-0578

CVE-2022-0578

GHSA-W78Q-4W34-JRJX

Affected Products

Publify

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0578.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/publify_core/CVE-2022-0578.yml · Exploit
• 🔥 https://huntr.dev/bounties/02c81928-eb47-476f-8000-e93dc796dbcc · Exploit
• https://github.com/publify/publify/commit/b50df050c593cc532b2c516792989bcfce2d73f7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-0578 · Security Note
• https://osv.dev/vulnerability/GHSA-w78q-4w34-jrjx · Vendor Advisory
• https://osv.dev/vulnerability/BIT-publify-2022-0578 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0578 · Vendor Advisory
• https://github.com/publify/publify · Note
• https://t.me/cvenotify/54871 · Telegram Post
• https://t.me/cvenotify/30657 · Telegram Post