Threats tagged 'ghsa-xg9q-98hr-3xwm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-129143paicoding-web · paicoding 1.0.3 contains a missing authorization vulnerability in the ArticleRestController article detail endpoint High8.72026-11-13GCVE DatabaseCVE-2026-129143 paicoding version 1.0.3 has a missing authorization vulnerability in the ArticleRestController's article detail endpoint. This flaw allows unauthenticated attackers to access restricted articles, including paid, login-only, member-only, and draft content, by enumerating article IDs via the GET /article/api/data/detail/{articleId} endpoint. Report on CVE-2026-129143 Vulnerability CWE-862 #ghsa-xg9q-98hr-3xwm	GCVE Database	2026-11-13

Page 1 of 1