CVE-2025-9100 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0. This vulnerability affects unknown code of the file /blog/comment of the component Frontend Blo…
Medium CVSS: 5.5

CVE-2025-9100

A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0. This vulnerability affects unknown code of the file /blog/comment of the component Frontend Blog Article Comment Handler. The manipulation leads to authentication bypass by capture-replay. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Vendor
Zhenfeng13
Product
My-blog
CWE
CWE-287
Yayın Tarihi
2025-08-18 02:15:27
Güncelleme
2025-09-03 15:25:42
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-287 My-blog MEDIUM Zhenfeng13 2025

Referanslar

https://github.com/ZHENFENG13/My-Blog/issues/149 https://github.com/ZHENFENG13/My-Blog/issues/149#issue-3265307853 https://vuldb.com/?ctiid.320422 https://vuldb.com/?id.320422 https://vuldb.com/?submit.628097 https://github.com/ZHENFENG13/My-Blog/issues/149 https://github.com/ZHENFENG13/My-Blog/issues/149#issue-3265307853