Skip to content
OpenAdvisories

Vendor

zhangyd-c

2 known vulnerabilities.

Products

OneBlog 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-2835

    zhangyd-c OneBlog RestApiController.java autoLink server-side request forgery

    A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been declared as problematic. Affected by this vulnerability is the function autoLink of the file com/zyd/blog/controller/RestApiController.java. The manipulation leads to server-side request …

    zhangyd-c OneBlog
  • Medium 5.3
    CVE-2025-2833

    zhangyd-c OneBlog HTTP Header redos

    A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to inefficient regular expression c…

    zhangyd-c OneBlog