Improper Access Control in GitHub repository publify/publify prior to 9.2.8. Anonymous users can't view but can leave comments on an article in draft mode.
{ "github_reviewed_at": "2022-06-03T15:46:47Z", "cwe_ids": [ "CWE-863" ], "nvd_published_at": "2022-05-16T15:15:00Z", "severity": "MODERATE", "github_reviewed": true }