CVE-2021-46085: oneblog project oneblog – CVSS 6.5 · Watchpost

← All vulnerabilities

CVE-2021-46085

中危 6.5CVE-2021-46085 · Published 25/01/2022 · updated 17/06/2026

要点

CVE-2021-46085 是影响 oneblog (oneblog project) 的中危 (CVSS 6.5)漏洞。
未来 30 天内被利用的概率（EPSS）：0.67%，高于 52.3% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
oneblog oneblog_project	`≤ 2.2.8`	No fix yet

Description

OneBlog <= 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority.

References

zhangyd-c/OneBlog · Exploit

oneblog 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free