{"action":"Upgrade publify_core to 9.2.5 or later.","affected":[{"fixed":"9.2.5","introduced":"9.0.0.pre1"}],"component":"publify_core","cve_ids":["CVE-2021-25973"],"ecosystem":"RubyGems","epss":0.00827,"exploited":false,"fixed_versions":["9.2.5"],"ghsa_id":"GHSA-x24j-87x9-jvv5","id":"tcs_01M5KEP2S8VHJGWVS4N8GQTK1C","modified_at":"2024-02-16T08:16:23.874641Z","published_at":"2021-11-03T17:34:22Z","references":["https://osv.dev/vulnerability/GHSA-x24j-87x9-jvv5","https://nvd.nist.gov/vuln/detail/CVE-2021-25973","https://github.com/publify/publify/commit/3447e0241e921b65f6eb1090453d8ea73e98387e","https://github.com/publify/publify","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/publify_core/CVE-2021-25973.yml","https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25973"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-x24j-87x9-jvv5","url":"https://osv.dev/vulnerability/GHSA-x24j-87x9-jvv5"}],"summary":"Publify `guest` role users can self-register even when the admin does not allow it"}