Vulnerabilidades do LiuYuYang01 ThriveX-Server
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam LiuYuYang01 ThriveX-Server: 1 registro(s), com versões afetadas e correções.
CVE-2026-110131
Média · 5.3
CWE-862 13/10/2026
ThriveX-Server through 4.0 Missing Authorization via Article Retrieval Endpoints
ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or isDel=true query parameters to retrieve full titles, descriptions and content of non-public articles.