Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series versions prior to Ver.2.10.53, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a user with an editor or higher privilege who can log in to the product may obtain arbitrary files on the server.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://developer.a-blogcms.jp/blog/news/JVN-70977403.html | Vendor Advisory |
| https://developer.a-blogcms.jp/blog/news/JVN-70977403.html | Vendor Advisory |
| https://jvn.jp/en/jp/JVN70977403/ | Third Party Advisory |
| https://jvn.jp/en/jp/JVN70977403/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
12 May 2025, 14:23
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Appleple
Appleple a-blog Cms |
|
| CPE | cpe:2.3:a:appleple:a-blog_cms:*:*:*:*:*:*:*:* | |
| References | () https://developer.a-blogcms.jp/blog/news/JVN-70977403.html - Vendor Advisory | |
| References | () https://jvn.jp/en/jp/JVN70977403/ - Third Party Advisory |
22 May 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-22 05:15
Updated : 2025-05-12 14:23
NVD link : CVE-2024-31394
Mitre link : CVE-2024-31394
JSON object : View
Products Affected
appleple
- a-blog_cms
CWE
No CWE.