#VU63676 Improper access control in Publify - CVE-2022-1810

Vulnerability identifier: #VU63676

Vulnerability risk: Medium

CVSSv4.0: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/U:Green]

CVE-ID: CVE-2022-1810

CWE-ID: CWE-284

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Publify
Web applications / Modules and components for CMS

Vendor: Publify

Description

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote user can change the value of the article[id] parameter and modify and delete admin articles.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Publify: 9.0.0 - 9.2.8

---

External links
https://github.com/publify/publify/commit/c0aba87844d1e47da50c0d99a3465164a4d244ce
https://huntr.dev/bounties/9b2d7579-032e-42da-b736-4b10a868eacb

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.