CVE-2019-14253: Publisure

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in servletcontroller in the secure portal in Publisure 2.1.2. One can bypass authentication and perform a query on PHP forms within the /AdminDir folder that should be restricted.

Affected products

• Publisure Publisure: version 2.1.2 only

Published 2019-09-18. Last modified 2026-06-17.