Unrated severityNVD Advisory· Published Jan 6, 2025· Updated Jan 6, 2025
zhenfeng13 My-Blog BlogController.java uploadFileByEditomd unrestricted upload
CVE-2024-13144
Description
A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0. Affected is the function uploadFileByEditomd of the file src/main/java/com/site/blog/my/core/controller/admin/BlogController.java. The manipulation of the argument editormd-image-file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
1- Range: 1.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/ZHENFENG13/My-Blog/issues/140mitreexploitissue-tracking
- vuldb.commitrethird-party-advisory
- github.com/ZHENFENG13/My-Blog/issues/140mitreissue-tracking
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
News mentions
0No linked articles in our index yet.