toy-blog is a headless content management system implementation. Starting in version 0.5.4 and prior to version 0.6.1, articles with private visibility can be read if the reader does not set credentials for the request. Users should upgrade to 0.6.1 or later to receive a patch. No known workarounds are available.
References
Configurations
History
06 Mar 2025, 14:24
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CPE | cpe:2.3:a:toy-blog_project:toy-blog:*:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-noinfo | |
| First Time |
Toy-blog Project
Toy-blog Project toy-blog |
|
| References | () https://github.com/KisaragiEffective/toy-blog/commit/f13a45f68c9560124558e6bb445ad441a4cf4732 - Patch | |
| References | () https://github.com/KisaragiEffective/toy-blog/security/advisories/GHSA-rf2q-5q4q-5fwr - Vendor Advisory |
01 Jul 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-01 22:15
Updated : 2025-03-06 14:24
NVD link : CVE-2024-39313
Mitre link : CVE-2024-39313
JSON object : View
Products Affected
toy-blog_project
- toy-blog
CWE