ApostropheCMS: Exposure of Sensitive Information via predictable export filenames

影響: npm:@apostrophecms/import-export < 3.7.1 → 3.7.1

When a user exports content through @apostrophecms/import-export, the module copies the generated archive into uploadfs at /exports/ and returns a public URL under /uploads/exports/. The filename is fully deterministic: site shortName, document type, a YYYYMMDDHHmmss timestamp, and the format extension. There is no secret token. Anyone who can guess that path can download the archive with a normal unauthenticated HTTP GET while the file is still present (10 minutes by default, longer if…

GitHub Advisory Databaseで読む

2026/10/22 04:45、GitHub Advisory Databaseが「ApostropheCMS: Exposure of Sensitive Information via predictable export filenames」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「警告」(medium) です。関連する技術: JavaScript / Node.js。CVE: CVE-2026-112953。