LiuYuYang01 vulnerabilities

🔔 Create alert RSS

Published CVEs affecting LiuYuYang01 products: 1 record(s), with severity, exploitation and fixes.

ThriveX-Server 1

Exploited only (KEV) →

CVE-2026-110131 Medium · 5.3 CWE-862 Oct 13, 2026

ThriveX-Server through 4.0 Missing Authorization via Article Retrieval Endpoints

ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or isDel=true query parameters to retrieve full titles, descriptions and content of non-public articles.