CVE-2025-36560

🗓️ 19 May 2025 08:08:00Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 22 Views

CVE-2025-36560: Server-side request forgery in a-blog CMS allows remote access to sensitive data.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-36560	19 May 202508:38	–	circl
CNNVD	appleple a-blog cms 代码问题漏洞	19 May 202500:00	–	cnnvd
Cvelist	CVE-2025-36560	19 May 202508:08	–	cvelist
EUVD	EUVD-2025-15669	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in a-blog cms	15 May 202509:11	–	jvn
NVD	CVE-2025-36560	19 May 202509:15	–	nvd
Positive Technologies	PT-2025-21220 · Unknown · A-Blog Cms	14 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-36560	21 May 202508:16	–	redhatcve
RedhatCVE	CVE-2025-41429	21 May 202508:17	–	redhatcve
Vulnrichment	CVE-2025-36560	19 May 202508:08	–	vulnrichment

NVD

Node

appleple a-blog_cmsRange2.8.0–2.8.85

appleple a-blog_cmsRange2.9.0–2.9.52

appleple a-blog_cmsRange2.10.0–2.10.63

appleple a-blog_cmsRange2.11.0–2.11.75

appleple a-blog_cmsRange3.0.0–3.0.47

appleple a-blog_cmsRange3.1.0–3.1.43

[
  {
    "vendor": "appleple inc.",
    "product": "a-blog cms",
    "versions": [
      {
        "version": "Ver. 2.8.85 and earlier (Ver. 2.8.x series)",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "appleple inc.",
    "product": "a-blog cms",
    "versions": [
      {
        "version": "Ver. 3.1.43 and earlier (Ver. 3.1.x series)",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "appleple inc.",
    "product": "a-blog cms",
    "versions": [
      {
        "version": "Ver. 3.0.47 and earlier (Ver. 3.0.x series)",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "appleple inc.",
    "product": "a-blog cms",
    "versions": [
      {
        "version": "Ver. 2.11.75 and earlier (Ver. 2.11.x series)",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "appleple inc.",
    "product": "a-blog cms",
    "versions": [
      {
        "version": "Ver. 2.10.63 and earlier (Ver. 2.10.x series)",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "appleple inc.",
    "product": "a-blog cms",
    "versions": [
      {
        "version": "Ver. 2.9.52 and earlier (Ver. 2.9.x series)",
        "status": "affected"
      }
    ]
  }
]

Source	Link
developer	www.developer.a-blogcms.jp/blog/news/JVNVU-90760614.html
jvn	www.jvn.jp/en/vu/JVNVU90760614/

30 Sep 2025 19:14Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5 - 8.6

CVSS 49.2

EPSS0.00303

SSVC

CWE-918