https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 22:43:58 +0000 https://db.gcve.eu/vuln/cve-2026-111610 <p><strong>Affected:</strong> b3log Solo</p> <p>B3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allows authenticated authors to access other authors&#39; articles by omitting per-author ownership checks. Attackers can query the console articles status endpoint to list other authors&#39; drafts, probe draft content via the k parameter, and use push2rhy to push others&#39; articles to the Rhythm community.</p> <p><strong>Affected:</strong> b3log Solo</p> <p>B3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allows authenticated authors to access other authors&#39; articles by omitting per-author ownership checks. Attackers can query the console articles status endpoint to list other authors&#39; drafts, probe draft content via the k parameter, and use push2rhy to push others&#39; articles to the Rhythm community.</p> https://db.gcve.eu/vuln/cve-2026-111610