CVE-2024-25559

概要

参考情報

• developer.a-blogcms.jp/blog/news/JVN-48966481.html · Vendor Advisory
• jvn.jp/en/jp/JVN48966481 · Third Party Advisory

a-blog cms のその他の脆弱性

• CVE-2025-41429緊急 9.8a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated at…
• CVE-2025-36560高 7.5Server-side request forgery vulnerability exists in a-blog cms multiple versions. If this vulnerability is exploited, a remote unauthenticat…
• CVE-2025-32999中 5.4Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and prior to Ver. 3.0.47. This issue exists in a speci…
• CVE-2025-27566高 7.2Path traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions prior to Ver. 3.0.47. This is an issue with ins…
• CVE-2025-31103高 7.5Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the s…