CVE-2023-2101

Katalog CVE

CVSS 6.5 · Medium EPSS 0,85%

Kerentanan Absolute Path Traversal pada mogublog project mogublog. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2. This issue affects the function uploadPictureByUrl of the file /mogu-picture/file/uploadPicsByUrl. The manipulation of the argument urlList leads to absolute path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226109 was assigned to this vulnerability.

Rincian

Terbit di NVD

15 April 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-36: Absolute Path Traversal

EPSS (30 hari)

0,85% peluang dieksploitasi; lebih tinggi dari 56,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/c3p0ooo-Yiqiyin/mogu_blog_v2/blob/main/README.md exploit · advisory pihak ketiga
• https://github.com/moxi624/mogu_blog_v2/issues/97 exploit · issue tracking · advisory pihak ketiga
• https://vuldb.com/?ctiid.226109 permissions required · advisory pihak ketiga
• https://vuldb.com/?id.226109 advisory pihak ketiga