Approved changes feed: RSS · Atom
cpe:2.3:a:zhangyd-c:oneblog:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Zhangyd C (3e4c61d2-66f7-5874-aeda-577a26be8e04) |
|---|---|
| Product | Oneblog (6e90edac-abfd-59fc-bc24-95fbf2d9c478) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2835 |
vulnerable | 2026-06-08 07:16:58.454532 |
zhangyd-c OneBlog RestApiController.java autoLink server-side request forgery
MEDIUM (4.3)
A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been declared as problematic. Affected by this vulnerability is the function autoLink of the file com/zyd/blog/controller/RestApiController.java. The manipulation leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-27T04:00:07.721Z
Updated: 2025-03-27T13:40:16.293Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2833 |
vulnerable | 2026-06-08 07:16:58.450464 |
zhangyd-c OneBlog HTTP Header redos
MEDIUM (5.3)
A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-27T04:00:05.554Z
Updated: 2025-03-27T13:41:47.915Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.