Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may obtain arbitrary files on the server and information on the internal server that is not disclosed to the public.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://developer.a-blogcms.jp/blog/news/JVN-70977403.html | Vendor Advisory |
| https://developer.a-blogcms.jp/blog/news/JVN-70977403.html | Vendor Advisory |
| https://jvn.jp/en/jp/JVN70977403/ | Third Party Advisory |
| https://jvn.jp/en/jp/JVN70977403/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
12 May 2025, 14:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://developer.a-blogcms.jp/blog/news/JVN-70977403.html - Vendor Advisory | |
| References | () https://jvn.jp/en/jp/JVN70977403/ - Third Party Advisory | |
| CPE | cpe:2.3:a:appleple:a-blog_cms:*:*:*:*:*:*:*:* | |
| First Time |
Appleple
Appleple a-blog Cms |
22 May 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-22 05:15
Updated : 2025-05-12 14:23
NVD link : CVE-2024-30420
Mitre link : CVE-2024-30420
JSON object : View
Products Affected
appleple
- a-blog_cms
CWE
No CWE.