CVE-2024-54954

Mô tả

Tham khảo

• gist.github.com/kaoniniang2/03658cc78e789b992b378f4951bedfb7 · Third Party Advisory
• gitee.com/yadong.zhang/DBlog/issues/IB6552 · Exploit

Lỗ hổng khác của oneblog

• CVE-2025-60355NGHIÊM TRỌNG 9.8zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.
• CVE-2025-56264CAO 7.5The /api/comment endpoint in zhangyd-c OneBlog 2.3.9 contains a denial-of-service vulnerability.
• CVE-2025-2835TRUNG BÌNH 4.3A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been declared as problematic. Affected by this vulnerability is the funct…
• CVE-2025-2833TRUNG BÌNH 5.3A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the co…
• CVE-2024-29474TRUNG BÌNH 5.4OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Management module.