ApostropheCMS: Exposure of Sensitive Information via predictable export filenames

影響: npm:@apostrophecms/import-export < 3.7.1 → 3.7.1

When a user exports content through @apostrophecms/import-export, the module copies the generated archive into uploadfs at /exports/ and returns a public URL under /uploads/exports/. The filename is fully deterministic: site shortName, document type, a YYYYMMDDHHmmss timestamp, and the format extension. There is no secret token. Anyone who can guess that path can download the archive with a normal unauthenticated HTTP GET while the file is still present (10 minutes by default, longer if…

在 GitHub Advisory Database 阅读

2026/10/22 04:45，GitHub Advisory Database 发布了“ApostropheCMS: Exposure of Sensitive Information via predictable export filenames”（类型：漏洞公告）。严重程度为“中危”（medium）。相关技术：JavaScript / Node.js。CVE：CVE-2026-112953。