CVE-2025-2833

Katalog CVE

CVSS 5.3 · Medium EPSS 0,72%

Kerentanan Uncontrolled Resource Consumption pada zhyd oneblog. Skor CVSS 3.1 5.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

27 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption
CWE-1333: Inefficient Regular Expression Complexity

EPSS (30 hari)

0,72% peluang dieksploitasi; lebih tinggi dari 52,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.301470 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.521813 advisory pihak ketiga · vdb entry
• https://github.com/zhangyd-c/OneBlog/issues/35 exploit · issue tracking
• https://github.com/zhangyd-c/OneBlog/issues/35#issue-2914268214 exploit · issue tracking
• https://vuldb.com/?ctiid.301470 permissions required · vdb entry