CVE-2024-30420

MEDIUM

4.4

Beschreibung

Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may obtain arbitrary files on the server and information on the internal server that is not disclosed to the public.

CVE Details

CVSS v3.1 Bewertung4.4

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

AngriffsvektorNETWORK

KomplexitatHIGH

Erforderliche PrivilegienHIGH

BenutzerinteraktionNONE

Veroffentlicht5/22/2024

Zuletzt geandert5/12/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

appleple:a-blog_cms

Schwachen (CWE)

CWE-918

Referenzen

https://developer.a-blogcms.jp/blog/news/JVN-70977403.html(vultures@jpcert.or.jp)

https://jvn.jp/en/jp/JVN70977403/(vultures@jpcert.or.jp)

https://developer.a-blogcms.jp/blog/news/JVN-70977403.html(af854a3a-2127-422b-91ae-364da2661108)

https://jvn.jp/en/jp/JVN70977403/(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.