Description
Server-side request forgery vulnerability exists in a-blog cms multiple versions. If this vulnerability is exploited, a remote unauthenticated attacker may gain access to sensitive information by sending a specially crafted request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| appleple | a-blog cms | Ver. 2.8.85 and earlier (Ver. 2.8.x series), Ver. 3.1.43 and earlier (Ver. 3.1.x series), Ver. 3.0.47 and earlier (Ver. 3.0.x series), Ver. 2.11.75 and earlier (Ver. 2.11.x series), Ver. 2.10.63 and earlier (Ver. 2.10.x series), Ver. 2.9.52 and earlier (Ver. 2.9.x series) | — |