Server side request forgery (ssrf)

OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the parameter entryUrls...

Design/Logic Flaw

Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater privileges...

Server side request forgery (ssrf)

OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Logo parameter under the Link module...

CVE-2022-34013

OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Logo parameter under the Link module...

CVE-2022-34013

CVE-2022-34013 affects OneBlog v2.3.4, where a Server-Side Request Forgery (SSRF) vulnerability exists via the Logo parameter in the Link module. The issue stems from insufficient validation of user input in this parameter, enabling an attacker to trigger SSRF against internal resources. Publicly...

CVE-2022-34011

OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the parameter entryUrls...

CVE-2022-34012

Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater privileges...

CVE-2022-34012

Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater privileges...

CVE-2022-34011

CVE-2022-34011 refers to a Server-Side Request Forgery (SSRF) in OneBlog v2.3.4. The vulnerability is triggered through the entryUrls parameter, which fails to properly validate user input, allowing an attacker to induce requests from the affected server and potentially probe the server’s intrane...

CVE-2022-34012

CVE-2022-34012 affects OneBlog v2.3.4. The issue is insecure permissions that let low-privilege administrators reset passwords of higher-privilege admins, implying a privilege-override flaw in authorization controls. The root cause is improper privilege checks within OneBlog’s admin flows. Docume...

CVE-2022-34013: Server-Side Request Forgery (SSRF)

OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Logo parameter under the Link module...

CVE-2022-34012: Incorrect Permission Assignment for Critical Resource

Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater privileges...

PT-2022-21968

Name of the Vulnerable Software and Affected Versions OneBlog version 2.3.4 Description The issue allows low-level administrators to reset the passwords of high-level administrators who hold greater privileges due to insecure permissions. Recommendations For OneBlog version 2.3.4, update the...

PT-2022-21969

Name of the Vulnerable Software and Affected Versions OneBlog version 2.3.4 Description A Server-Side Request Forgery SSRF issue was discovered, which can be exploited via the Logo parameter under the Link module. This allows for potentially malicious requests to be made from the server...

OneBlog 代码问题漏洞

OneBlog is a Java blog. version v2.3.4 of OneBlog contains a server-side request forgery vulnerability in which the source parameter entryUrls fails to properly validate user input and can be exploited to probe the server's intranet resources...

OneBlog 安全漏洞

OneBlog is a beautiful, powerful Java blog. An authorization issue vulnerability exists in OneBlog v2.3.4, which stems from the presence of insecure privileges in the program, and can be exploited by an attacker to allow a low-level administrator to reset the password of a high-level administrato...

OneBlog 代码问题漏洞

OneBlog is a beautiful and powerful Java blog. OneBlog v2.3.4 version exists server-side request forgery vulnerability, the vulnerability stems from the Link module under the Logo parameter fails to correctly validate the user input, an attacker can use the vulnerability to probe the server...

PT-2022-21967

Name of the Vulnerable Software and Affected Versions OneBlog version 2.3.4 Description A Server-Side Request Forgery SSRF issue was discovered, which can be exploited via the entryUrls parameter. This allows an attacker to forge requests from the server, potentially leading to unauthorized acces...

CVE-2022-34011: Server-Side Request Forgery (SSRF)

OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the parameter entryUrls...

OneBlog Permission License and Access Control Issues Vulnerability

OneBlog is a beautiful, powerful Java blog. OneBlog in version 2.2.8 and earlier suffers from a Permissions Permission and Access Control Issues vulnerability that arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker coul...