Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-2101
HistoryApr 15, 2023 - 1:15 p.m.

Path traversal

2023-04-1513:15:00
PRIOn knowledge base
www.prio-n.com
2
vulnerability
moxi624 mogu blog
absolute path traversal
uploadpicturebyurl
remote attack
exploit
public disclosure
identifier vdb-226109

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.9%

A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2. This issue affects the function uploadPictureByUrl of the file /mogu-picture/file/uploadPicsByUrl. The manipulation of the argument urlList leads to absolute path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226109 was assigned to this vulnerability.

CPENameOperatorVersion
mogublogle5.2

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.9%

Related for PRION:CVE-2023-2101