CVE record · 1 source
CVE-2026-113652
CVSS 5.6ApostropheCMS is an open-source Node.js content management system.
- Vendor
- Microsoft
- Product
- azure
- CVSS
- 5.6
- Exposure class
- Cloud platform, Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
ApostropheCMS is an open-source Node.js content management system.
ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token into every public attachment URL. When uploadfs is configured with the Azure…