CVE-2025-13816

Summary: CVE-2025-13816 affects moxi159753 Mogu Blog v2 up to 5.2. The vulnerability lies in the ZIP File Handler’s FileOperation.unzip function (in /networkDisk/unzipFile). Manipulating the fileUrl argument enables path traversal, potentially enabling remote, unauthenticated access. Documents in...