CVE-2024-30420mediumCWE-918

CVE-2024-30420: medium-severity vulnerability in appleple inc. a-blog cms Ver.3.1.x series

Published · Updated

Follow this CVE+ Monitor a-blog cms Ver.3.0.x series+ Monitor a-blog cms Ver.3.1.x series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.4epss 0.3%
Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may obtain arbitrary files on the server and information on the internal server that is not disclosed to the public.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products
appleple inc. · a-blog cms Ver.3.0.x seriesappleple inc. · a-blog cms Ver.3.1.x series
Related CVEs — appleple inc. a-blog cms Ver.3.1.x series

In the same product, most dangerous first.

CVE-2024-23180HIGHCVE-2024-23180EPSS 0.9%CVE-2024-27279MEDIUMCVE-2024-27279EPSS 0.8%CVE-2024-23182HIGHCVE-2024-23182EPSS 0.7%CVE-2024-31394MEDIUMCVE-2024-31394EPSS 0.7%CVE-2024-23348HIGHCVE-2024-23348EPSS 0.7%CVE-2024-31396MEDIUMCVE-2024-31396EPSS 0.4%