CVE-2025-9100: falha de média gravidade em zhenfeng13 My-Blog
zhenfeng13 My-Blog Frontend Blog Article Comment comment authentication replay
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.6%
A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0. This vulnerability affects unknown code of the file /blog/comment of the component Frontend Blog Article Comment Handler. The manipulation leads to authentication bypass by capture-replay. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
zhenfeng13 · My-BlogCVEs relacionadas — zhenfeng13 My-Blog
No mesmo produto, das mais perigosas para as menos.
CVE-2024-13145MEDIUMzhenfeng13 My-Blog uploadController. java upload unrestricted uploadEPSS 0.4%CVE-2024-13144MEDIUMzhenfeng13 My-Blog BlogController.java uploadFileByEditomd unrestricted uploadEPSS 0.4%CVE-2023-1937MEDIUMzhenfeng13 My-Blog userInfo cross-site request forgeryEPSS 0.3%CVE-2025-8740MEDIUMzhenfeng13 My-Blog Category save cross site scriptingEPSS 0.3%CVE-2025-9101MEDIUMzhenfeng13 My-Blog Tag save cross site scriptingEPSS 0.3%CVE-2025-8739MEDIUMzhenfeng13 My-Blog save cross-site request forgeryEPSS 0.3%