CVE-2023-0299

    Dashboard / Vulnerabilities / CVE-2023-0299

    CVE-2023-0299

    Published: 14 Jan 2023Last Modified: 12 Aug 2026

    Summary: Improper Input Validation in publify/publify

    Details: Improper Input Validation in GitHub repository publify/publify prior to 9.2.10.

    References: https://huntr.dev/bounties/0049774b-1857-46dc-a834-f1fb15138c53, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0299.json, https://nvd.nist.gov/vuln/detail/CVE-2023-0299, https://github.com/publify/publify/commit/ca46da283572b4f8c0b5aa245008756c8a5fd1b1

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -c44e3f33e70bb3cb5590872f15534bedcaebc2d3

    Affected versions

    v9.2.9
    v9.2.8
    v9.2.7
    v9.2.6
    v9.2.5
    v9.2.4
    v9.2.3
    v9.2.2
    v9.2.1
    v9.2.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-0299 | CVE-DB