{"id":"CVE-2022-2815","summary":"Insecure Storage of Sensitive Information in publify/publify","details":"Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10.","aliases":["BIT-publify-2022-2815","GHSA-79wq-g4v9-gfj4"],"modified":"2026-08-12T03:51:35.532408603Z","published":"2023-01-14T00:00:00Z","database_specific":{"cwe_ids":["CWE-922"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2815.json","cna_assigner":"@huntrdev"},"references":[{"type":"WEB","url":"https://huntr.dev/bounties/22fdcc39-8c1a-4e4c-8eae-be3fd764f8b4"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2815.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2815"},{"type":"FIX","url":"https://github.com/publify/publify/commit/af69097d349f4c00f244c51cd3c3e937fd3387cd"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/publify/publify","events":[{"introduced":"0"},{"fixed":"c44e3f33e70bb3cb5590872f15534bedcaebc2d3"},{"fixed":"af69097d349f4c00f244c51cd3c3e937fd3387cd"}],"database_specific":{"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:publify_project:publify:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"9.2.10"}]}}],"versions":["v9.2.9","v9.2.8","v9.2.7","v9.2.6","v9.2.5","v9.2.4","v9.2.3","v9.2.2","v9.2.1","v9.2.0","v9.1.0","v9.0.1","v9.0.0","v8.3.1","v8.3.0","v8.2.0","v8.1.1","v8.1.0","v8.0.2","v8.0.1","v8.0","7.1.0","7.0.0","release_7_0_0-beta1","6.9.0","release_6_1_4","release_6_1_3","release_6_1_2","release_6_1_1","release_6_1_0","release_6_0_9","release_6_0_7","release_6_0_6","release_6_0_4","release_6_0_3","release_6_0_2","release_6_0_1","release_6_0_0","release_5_5","release_5_4_4","release_5_4_1","release_5_4_0","5_3_0","release_5_2_98","release_5_2_0","release_5_1_98","release-5.1.3","release-5.1.2","release-5.1.1","release-5.1","release-5.0.3.98","release-5.0.3-no-rly","release-5.0.3","release-1.6.7"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-2815.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"}]}