Approved changes feed: RSS · Atom
cpe:2.3:a:kisaragieffective:toy-blog:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Kisaragieffective (88802639-6c6f-5135-ad1c-5c118bd7c0f1) |
|---|---|
| Product | Toy Blog (14b8e02e-cf3b-5a8f-9739-d820e9ca0767) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-39314 |
vulnerable | 2026-06-08 06:41:49.052920 |
toy-blog administrative token leaked through the command line parameter
MEDIUM (4.7)
toy-blog is a headless content management system implementation. Starting in version 0.4.3 and prior to version 0.5.0, the administrative password was leaked through the command line parameter. The problem was patched in version 0.5.0. As a workaround, pass `--read-bearer-token-from-stdin` to the launch arguments and feed the token from the standard input in version 0.4.14 or later. Earlier versions do not have this workaround.
Published: 2024-07-01T21:33:54.000Z
Updated: 2024-08-02T04:19:20.704Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39313 |
vulnerable | 2026-06-08 06:41:49.051867 |
toy-blog Improper Input Validation vulnerability
MEDIUM (6.5)
toy-blog is a headless content management system implementation. Starting in version 0.5.4 and prior to version 0.6.1, articles with private visibility can be read if the reader does not set credentials for the request. Users should upgrade to 0.6.1 or later to receive a patch. No known workarounds are available.
Published: 2024-07-01T21:23:38.247Z
Updated: 2024-08-02T04:19:20.681Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.