CVE-2026-110904 | CVSS: 5.3 | 严重级别: MEDIUM
ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.
参考链接:
• https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-2j32-q6rx-h
• https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-2j32-q6rx-h
📌 数据来源: NVD 官方
⚠️ 合规声明: 本文内容仅用于网络安全合规学习、科研与授权测试用途。严禁用于任何未授权行为,违者自行承担全部法律责任。