High severity8.6NVD Advisory· Published May 19, 2025· Updated Jun 17, 2026

CVE-2025-36560

Description

Server-side request forgery vulnerability exists in a-blog cms multiple versions. If this vulnerability is exploited, a remote unauthenticated attacker may gain access to sensitive information by sending a specially crafted request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Appleple/A Blogcms
cpe:2.3:a:appleple:a-blog_cms:*:*:*:*:*:*:*:*
Range: >=2.8.0,<=2.8.85
appleple inc./a-blog cmsv5
Range: Ver. 2.9.52 and earlier (Ver. 2.9.x series)
A Blog/a-blogcmsllm-fuzzy

Patches

Vulnerability mechanics

References

developer.a-blogcms.jp/blog/news/JVNVU-90760614.htmlnvdVendor Advisory
jvn.jp/en/vu/JVNVU90760614/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.559
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000