CVE-2024-13200

wander-chu SpringBoot-Blog 1.0 contains a critical flaw in the HTTP POST Request Handler: the preHandle function in BaseInterceptor.java has improper access controls, enabling remote exploitation. Multiple connected sources confirm the affected component and remote attack possibility, with public...

CVE-2024-13201

CVE-2024-13201 affects wander-chu SpringBoot-Blog 1.0 in the Admin Attachment Handler, specifically the upload function in AttachtController.java. The root cause is manipulation of the file argument, enabling unrestricted uploads. Exploitation can be remote, and public disclosures exist. Several ...

CVE-2024-13202

CVE-2024-13202 affects wander-chu SpringBoot-Blog 1.0. The vulnerability lies in the function modifiyArticle in file src/main/java/com/my/blog/website/controller/admin/PageController.java of the Blog Article Handler component, where the argument content is manipulated, enabling cross-site scripti...