CVE-2025-36560
19.05.2025, 09:15
Server-side request forgery vulnerability exists in a-blog cms multiple versions. If this vulnerability is exploited, a remote unauthenticated attacker may gain access to sensitive information by sending a specially crafted request.
| Vendor | Product | Version |
|---|---|---|
| appleple | a-blog_cms | 2.8.0 ≤ 𝑥 ≤ 2.8.85 |
| appleple | a-blog_cms | 2.9.0 ≤ 𝑥 ≤ 2.9.52 |
| appleple | a-blog_cms | 2.10.0 ≤ 𝑥 ≤ 2.10.63 |
| appleple | a-blog_cms | 2.11.0 ≤ 𝑥 ≤ 2.11.75 |
| appleple | a-blog_cms | 3.0.0 ≤ 𝑥 ≤ 3.0.47 |
| appleple | a-blog_cms | 3.1.0 ≤ 𝑥 ≤ 3.1.43 |
𝑥
= Vulnerable software versions