Description (CNA)
ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| apostrophecms / ApostropheCMS | affected 0 before 4.33.0 |
CWE
CWE-863
References
ADP enrichment
No English description supplied.