Threat database

B3log Solo versions up to 4.4.0 have an authorization bypass vulnerability in the ArticleConsole component. Authenticated authors can access and manipulate other authors' articles due to missing ownership checks. This allows listing drafts of other authors, viewing draft content via a user-controlled parameter, and pushing others' articles to the Rhythm community.

B3log Symphony versions up to and including 3.6.4 have a missing authorization vulnerability. This flaw allows unauthenticated attackers to access administrative routes because the permission middleware does not properly enforce authorization for routes missing permission.rule.url entries. Exploitation enables attackers to perform actions such as ignoring reports, deleting unused tags, or granting user points without audit logging.