CVE-2024-25559

URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a specially crafted request, the administrator of the product may be forced to access an arbitrary website when clicking a link in the audit log...

CVE-2024-25559

The a-blog cms content management system (versions 3.1.0 to 3.1.8 ) is vulnerable to a URL spoofing vulnerability (CWE-451). An attacker can send a specially crafted request that may force a product administrator to visit an arbitrary website when they click a link within the audit log. To remedi...