VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 29, 2017· Updated Jun 17, 2026

CVE-2017-10679

CVE-2017-10679

Description

Piwigo through 2.9.1 allows remote attackers to obtain sensitive information about the descriptive name of a permalink by examining the redirect URL that is returned in a request for the permalink ID number of a private album. The permalink ID numbers are easily guessed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Piwigo/Piwigo2 versions
    cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*range: <=2.9.1
    • (no CPE)range: <=2.9.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.