PT-2026-89904

MoguBlog through 6.2 contains an authorization bypass vulnerability in the POST /pictureSort/getPictureSortByUid endpoint, which omits the @AuthorityVerify annotation required to enforce role-based permissions. Authenticated back-office users without image-category permissions can supply a catego...

MoguBlog（蘑菇博客） 安全漏洞

MoguBlog is a microservices-based, front-end-backend separated blog system developed by Streamlet developers in China. There are security vulnerabilities in MoguBlog v2 5.2 and earlier versions. These vulnerabilities stem from improper handling of the LocalFileServiceImpl.uploadPictureByUrl...

MoguBlog 代码问题漏洞

MoguBlog MoguBlog is a front-end and back-end separated blogging system based on microservice architecture by an individual developer in Streamlet, China. A security vulnerability exists in MoguBlog version 5.2, which stems from uploading files without any restrictions...