@apostrophecms form güvenlik açıkları (CVE)

@apostrophecms form için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

5.3Orta

CVE-2026-113667 22 gün önce

ApostropheCMS: CAPTCHA response token not URL-encoded

apostrophecms apostrophe; @apostrophecms form; @apostrophecms login-hcaptcha; @apostrophecms login-recaptcha

ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the Form add-on, 1.2.1 of login-recaptcha, and 1.3.0 of login-hcaptcha, these three CAPTCHA integrations interpolate an unencoded user-supplied response token into the provid…

5.3Orta

CVE-2026-113656 22 gün önce

ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS

apostrophecms apostrophe; @apostrophecms form

ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the ApostropheCMS Form add-on, its form submission route stages unbounded multipart uploads before form validation or authentication and lacks upload size, count, and rate li…