Incorrect access control in the BlogPage.get_entries() component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog index, the tag, cate…

高危 CVSS 7.5

CVECVE-2026-88421

首次发现2026-09-25 18:16 UTC

披露时间2026-09-25 13:17 UTC

最后更新2026-09-25 18:16 UTC

通道状态auto

摘要

Incorrect access control in the BlogPage.get_entries() component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog index, the tag, category, author and date archives, the sidebar widgets, or the RSS feed.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

深度研判

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。

数据来源

NVD DATABASE

原始链接

https://gist.github.com/itsmohitnarayan/736225bd6cd79031a5dfbf56acdb14ae
https://gist.github.com/itsmohitnarayan/736225bd6cd79031a5dfbf56acdb14ae

时间线

2026-09-25 nvd_ingest NVD