Mogu Blog V2
Approved changes feed: RSS · Atom
cpe:2.3:a:moxi159753:mogu_blog_v2:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Moxi159753 (00e26437-cf32-5e6e-ac82-c623fbf14472) |
|---|---|
| Product | Mogu Blog V2 (3dbadcc2-361e-54cf-ab15-66107abbe241) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-13816 |
vulnerable | 2026-06-08 07:06:32.767075 |
moxi159753 Mogu Blog v2 ZIP File unzipFile FileOperation.unzip path traversal
MEDIUM (6.3)
A security vulnerability has been detected in moxi159753 Mogu Blog v2 up to 5.2. The impacted element is the function FileOperation.unzip of the file /networkDisk/unzipFile of the component ZIP File Handler. Such manipulation of the argument fileUrl leads to path traversal. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-01T08:32:05.364Z
Updated: 2025-12-01T14:05:54.284Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13815 |
vulnerable | 2026-06-08 07:06:32.766594 |
moxi159753 Mogu Blog v2 pictures unrestricted upload
MEDIUM (6.3)
A weakness has been identified in moxi159753 Mogu Blog v2 up to 5.2. The affected element is an unknown function of the file /file/pictures. This manipulation of the argument filedatas causes unrestricted upload. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-01T08:02:05.907Z
Updated: 2025-12-01T14:06:47.760Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13814 |
vulnerable | 2026-06-08 07:06:32.766202 |
moxi159753 Mogu Blog v2 uploadPicsByUrl LocalFileServiceImpl.uploadPictureByUrl server-side request forgery
HIGH (7.3)
A security flaw has been discovered in moxi159753 Mogu Blog v2 up to 5.2. Impacted is the function LocalFileServiceImpl.uploadPictureByUrl of the file /file/uploadPicsByUrl. The manipulation results in server-side request forgery. The attack can be launched remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-01T07:32:06.011Z
Updated: 2025-12-01T16:08:16.795Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13813 |
vulnerable | 2026-06-08 07:06:32.764594 |
moxi159753 Mogu Blog v2 Storage Management Endpoint storage authorization
MEDIUM (5.6)
A vulnerability was identified in moxi159753 Mogu Blog v2 up to 5.2. This issue affects some unknown processing of the file /storage/ of the component Storage Management Endpoint. The manipulation leads to missing authorization. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitability is assessed as difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-01T07:02:06.723Z
Updated: 2025-12-01T16:08:43.772Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.