Unrated severityNVD Advisory· Published Jan 6, 2025· Updated Jan 6, 2025
zhenfeng13 My-Blog uploadController. java upload unrestricted upload
CVE-2024-13145
Description
A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
1- Range: 1.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/ZHENFENG13/My-Blog/issues/141mitreexploitissue-tracking
- vuldb.commitrethird-party-advisory
- github.com/ZHENFENG13/My-Blog/issues/141mitreissue-tracking
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
News mentions
0No linked articles in our index yet.