CVE-2022-0574

Improper Access Control in GitHub repository publify/publify prior to 9.2.8.

• CWE-284
• CWE-863

• https://github.com/publify/publify/commit/0e6c66ac2002136517662399bca9d838c80d9739Patch, Third Party Advisory
• https://huntr.dev/bounties/6f322c84-9e20-4df6-97e8-92bc271ede3fExploit, Patch, Third Party Advisory
• https://github.com/publify/publify/commit/0e6c66ac2002136517662399bca9d838c80d9739Patch, Third Party Advisory
• https://huntr.dev/bounties/6f322c84-9e20-4df6-97e8-92bc271ede3fExploit, Patch, Third Party Advisory

Published

May 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0567A flaw was found in ovn-kubernetes. This flaw allows a syste…9.1
• CVE-2022-0569Observable Discrepancy in Packagist snipe/snipe-it prior to …4.3
• CVE-2022-0570Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.9.8
• CVE-2022-0571Cross-site Scripting (XSS) - Reflected in GitHub repository …6.1
• CVE-2022-0572Heap-based Buffer Overflow in GitHub repository vim/vim prio…7.8
• CVE-2022-0573JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable t…8.8
• CVE-2022-0575Cross-site Scripting (XSS) - Stored in Packagist librenms/li…5.4
• CVE-2022-0576Cross-site Scripting (XSS) - Generic in Packagist librenms/l…6.1
• CVE-2022-0577Exposure of Sensitive Information to an Unauthorized Actor i…6.5
• CVE-2022-0578Code Injection in GitHub repository publify/publify prior to…6.5
• CVE-2022-0579Missing Authorization in Packagist snipe/snipe-it prior to 5…6.5
• CVE-2022-0580Incorrect Authorization in Packagist librenms/librenms prior…8.8