148 matches found
CVE-2022-34013
CVE-2022-34013 affects OneBlog v2.3.4, where a Server-Side Request Forgery (SSRF) vulnerability exists via the Logo parameter in the Link module. The issue stems from insufficient validation of user input in this parameter, enabling an attacker to trigger SSRF against internal resources. Publicly...
CVE-2022-34013
OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Logo parameter under the Link module...
CVE-2022-34012
CVE-2022-34012 affects OneBlog v2.3.4. The issue is insecure permissions that let low-privilege administrators reset passwords of higher-privilege admins, implying a privilege-override flaw in authorization controls. The root cause is improper privilege checks within OneBlog’s admin flows. Docume...
CVE-2022-34012
Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater privileges...
CVE-2022-34011
CVE-2022-34011 refers to a Server-Side Request Forgery (SSRF) in OneBlog v2.3.4. The vulnerability is triggered through the entryUrls parameter, which fails to properly validate user input, allowing an attacker to induce requests from the affected server and potentially probe the server’s intrane...
CVE-2022-34011
OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the parameter entryUrls...
OneBlog 代码问题漏洞
OneBlog is a Java blog. version v2.3.4 of OneBlog contains a server-side request forgery vulnerability in which the source parameter entryUrls fails to properly validate user input and can be exploited to probe the server's intranet resources...
OneBlog 安全漏洞
OneBlog is a beautiful, powerful Java blog. An authorization issue vulnerability exists in OneBlog v2.3.4, which stems from the presence of insecure privileges in the program, and can be exploited by an attacker to allow a low-level administrator to reset the password of a high-level administrato...
OneBlog 代码问题漏洞
OneBlog is a beautiful and powerful Java blog. OneBlog v2.3.4 version exists server-side request forgery vulnerability, the vulnerability stems from the Link module under the Logo parameter fails to correctly validate the user input, an attacker can use the vulnerability to probe the server...
OneBlog Permission License and Access Control Issues Vulnerability
OneBlog is a beautiful, powerful Java blog. OneBlog in version 2.2.8 and earlier suffers from a Permissions Permission and Access Control Issues vulnerability that arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker coul...
CVE-2021-46085
OneBlog = 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority...
CVE-2021-46085
OneBlog = 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority...
CVE-2021-46085
OneBlog = 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority...
Design/Logic Flaw
OneBlog = 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority...
CVE-2021-46085
CVE-2021-46085 relates to OneBlog versions 2.2.8 and earlier, described across multiple sources as a Permissions/Access Control issue. The vulnerability allows a low-level administrator to delete or remove a high-level administrator beyond their authority due to insecure permissions. Sources cons...
CVE-2021-46085
OneBlog = 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority...
OneBlog 权限许可和访问控制问题漏洞
OneBlog is a beautiful, powerful Java blog. OneBlog in version 2.2.8 and earlier suffers from a Permissions Permission and Access Control Issues vulnerability that arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker coul...
OneBlog Cross-Site Scripting Vulnerability
OneBlog is a simple and beautiful , powerful and adaptive Java blog. The use of springboot development , front-end use Bootstrap. support for mobile adaptive , with a complete front-end and back-end management functions . OneBlog in version 2.2.8 before the existence of XSS vulnerability , the...