https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 09:51:55 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-226008 EUVD-2026-226008 https://cve.radiocsirt.org/vuln/euvd-2026-226008 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39311 <p>Publify is a self hosted Web publishing platform on Rails. Prior to version 10.0.1 of Publify, corresponding to versions prior to 10.0.2 of the `publify_core` rubygem, publisher on a `publify` application is able to perform a cross-site scripting (XSS) attack on an administrator using the redirect functionality. The exploitation of this XSS vulnerability requires the administrator to click a malicious link. An attack could attempt to hide their payload by using HTML, or other encodings, as to not make it obvious to an administrator that this is a malicious link. A publisher may attempt to use this vulnerability to escalate their privileges and become an administrator. Version 10.0.1 of Publify and version 10.0.2 of the `publify_core` rubygem fix the issue.</p> <p>Publify is a self hosted Web publishing platform on Rails. Prior to version 10.0.1 of Publify, corresponding to versions prior to 10.0.2 of the `publify_core` rubygem, publisher on a `publify` application is able to perform a cross-site scripting (XSS) attack on an administrator using the redirect functionality. The exploitation of this XSS vulnerability requires the administrator to click a malicious link. An attack could attempt to hide their payload by using HTML, or other encodings, as to not make it obvious to an administrator that this is a malicious link. A publisher may attempt to use this vulnerability to escalate their privileges and become an administrator. Version 10.0.1 of Publify and version 10.0.2 of the `publify_core` rubygem fix the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-39311 https://cve.radiocsirt.org/vuln/ghsa-8fm5-gg2f-f66q <p><strong>Affected:</strong> RubyGems: publify_core</p> <p>### Summary A publisher on a `publify` application is able to perform a cross-site scripting attack on an administrator using the redirect functionality.</p> <p>### Details A publisher on a `publify` application is able to perform a cross-site scripting attack on an administrator using the redirect functionality. The exploitation of this XSS vulnerability requires the administrator to click a malicious link.</p> <p>We can create a redirect to a `javascript:alert()` URL. Whilst the redirect itself doesn&#39;t work, on the administrative panel, an a tag is created with the payload as the URI. Upon clicking this link, the XSS is triggered.</p> <p>An attack could attempt to hide their payload by using HTML, or other encodings, as to not make it obvious to an administrator that this is a malicious link.</p> <p>### PoC A publisher can create a new redirect as shown below. The payload used is `javascript:alert()`. </p> <p>An administrator will now see this redirect in their overview of the page. </p> <p>If they click the link on the right, it triggers the XSS. </p> <p>### Impact A publisher may attempt to use this vulnerability to escalate their privileges and become an administrator.</p> <p><strong>Affected:</strong> RubyGems: publify_core</p> <p>### Summary A publisher on a `publify` application is able to perform a cross-site scripting attack on an administrator using the redirect functionality.</p> <p>### Details A publisher on a `publify` application is able to perform a cross-site scripting attack on an administrator using the redirect functionality. The exploitation of this XSS vulnerability requires the administrator to click a malicious link.</p> <p>We can create a redirect to a `javascript:alert()` URL. Whilst the redirect itself doesn&#39;t work, on the administrative panel, an a tag is created with the payload as the URI. Upon clicking this link, the XSS is triggered.</p> <p>An attack could attempt to hide their payload by using HTML, or other encodings, as to not make it obvious to an administrator that this is a malicious link.</p> <p>### PoC A publisher can create a new redirect as shown below. The payload used is `javascript:alert()`. </p> <p>An administrator will now see this redirect in their overview of the page. </p> <p>If they click the link on the right, it triggers the XSS. </p> <p>### Impact A publisher may attempt to use this vulnerability to escalate their privileges and become an administrator.</p> https://cve.radiocsirt.org/vuln/ghsa-8fm5-gg2f-f66q