apostrophecms uploadfs güvenlik açıkları (CVE)

apostrophecms uploadfs için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

5.6Orta

CVE-2026-113652 22 gün önce

ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

apostrophecms apostrophe; apostrophecms uploadfs

ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token into every public attachment URL. When uploadfs is configured with the Azure backend and sas: true, createContain…

3.3Düşük

CVE-2026-113651 22 gün önce

ApostropheCMS: Path traversal in uploadfs

apostrophecms apostrophe; apostrophecms uploadfs

ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library. Prior to uploadfs 1.28.0, attacker-controlled paths that reach the local backend can contain parent-directory segments that escape the configured uplo…