hotCRP 3.1
Approved changes feed: RSS · Atom
cpe:2.3:a:hotcrp:hotcrp:3.1:*:*:*:*:*:*:*part: a version: 3.1 update: *
| Vendor | Hotcrp (35d7bd15-566a-5b85-9890-ef5d24b30f30) |
|---|---|
| Product | Hotcrp (38d9bc4f-e911-5007-b934-2f1d6f29b870) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/kohler/hotcrp |
purl2cpe | 2026-06-01 10:16:27.357599 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-23878 |
vulnerable | 2026-06-08 07:51:16.377017 |
HotCRP vulnerable to exposure of submitted documents
MEDIUM (6.5)
HotCRP is conference review software. Starting in commit aa20ef288828b04550950cf67c831af8a525f508 and prior to commit ceacd5f1476458792c44c6a993670f02c984b4a0, authors with at least one submission on a HotCRP site could use the document API to download any documents (PDFs, attachments) associated with any submission. The problem was patched in commit ceacd5f1476458792c44c6a993670f02c984b4a0.
Published: 2026-01-19T18:08:41.100Z
Updated: 2026-01-20T21:40:57.565Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.