CVE-2024-39313

toy-blog is a headless content management system implementation. Starting in version 0.5.4 and prior to version 0.6.1, articles with private visibility can be read if the reader does not set credentials for the request. Users should upgrade to 0.6.1 or later to receive a patch. No known workarounds are available.

• CWE-200

• https://github.com/KisaragiEffective/toy-blog/commit/f13a45f68c9560124558e6bb445ad441a4cf4732Patch
• https://github.com/KisaragiEffective/toy-blog/security/advisories/GHSA-rf2q-5q4q-5fwrVendor Advisory
• https://github.com/KisaragiEffective/toy-blog/commit/f13a45f68c9560124558e6bb445ad441a4cf4732Patch
• https://github.com/KisaragiEffective/toy-blog/security/advisories/GHSA-rf2q-5q4q-5fwrVendor Advisory

Published

Jul 1, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-39308RailsAdmin is a Rails engine that provides an interface for …5.4
• CVE-2024-39309Parse Server is an open source backend that can be deployed …9.8
• CVE-2024-3931A vulnerability was found in Totara LMS up to 18.7. It has b…5.4
• CVE-2024-39310The Basil recipe theme for WordPress is vulnerable to Persis…5.4
• CVE-2024-39311Publify is a self hosted Web publishing platform on Rails. P…5.4
• CVE-2024-39312Botan is a C++ cryptography library. X.509 certificates can …5.3
• CVE-2024-39314toy-blog is a headless content management system implementat…4.7
• CVE-2024-39315Pomerium is an identity and context-aware access proxy. Prio…6.5
• CVE-2024-39316Rack is a modular Ruby web server interface. Starting in ver…6.5
• CVE-2024-39317Wagtail is an open source content management system built on…4.9
• CVE-2024-39318The Ibexa Admin UI Bundle contains all the necessary parts t…5.4
• CVE-2024-39319aimeos/ai-controller-frontend is the Aimeos frontend control…5.3