Critical · 9.8 CVE-2024-50644 EUVD-2024-54901GHSA-7gx7-vvxp-v372

zhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access API without…

Published Aug 22, 2025 · Updated Aug 26, 2025 · Assigned by mitre

Description

zhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access API without any token.

References

https://github.com/zhisheng17/blog/issues/64
https://github.com/zhisheng17/blog
https://gitee.com/fushuling/cve/blob/master/CVE-2024-50644.md