VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 15, 2024· Updated Nov 1, 2024

CVE-2024-25559

CVE-2024-25559

Description

URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a specially crafted request, the administrator of the product may be forced to access an arbitrary website when clicking a link in the audit log.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • A Blog/A Blogllm-fuzzy
    Range: 3.1.0 <= version <= 3.1.8
  • appleple inc./a-blog cmsv5
    Range: Ver.3.1.0 to Ver.3.1.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.