Changelog Com
Monthly
Unauthenticated attackers can read unpublished changelog.com content - draft posts, unsent newsletters and declined news items - by requesting the site's editorial preview actions, which in builds before commit 7b35e829 performed no admin or authorization check. Any remote user can enumerate identifiers (hashid-encoded post IDs, sequential newsletter slugs, plain integer news IDs) against the preview endpoints and retrieve material that was never meant to be public. Rated CVSS 6.9 with confidentiality-only impact (no integrity or availability effect), it is not listed in CISA KEV and no public exploit code has been identified at time of analysis, though a public researcher writeup describing the enumeration approach exists; the vuln.today decision label is monitor, so this is a genuine but low-to-moderate disclosure issue rather than an emergency. No EPSS score was supplied in the available intelligence.
Unauthenticated attackers can read unpublished changelog.com content - draft posts, unsent newsletters and declined news items - by requesting the site's editorial preview actions, which in builds before commit 7b35e829 performed no admin or authorization check. Any remote user can enumerate identifiers (hashid-encoded post IDs, sequential newsletter slugs, plain integer news IDs) against the preview endpoints and retrieve material that was never meant to be public. Rated CVSS 6.9 with confidentiality-only impact (no integrity or availability effect), it is not listed in CISA KEV and no public exploit code has been identified at time of analysis, though a public researcher writeup describing the enumeration approach exists; the vuln.today decision label is monitor, so this is a genuine but low-to-moderate disclosure issue rather than an emergency. No EPSS score was supplied in the available intelligence.