CNNVD-202508-1997 Information
CNNVD ID
CNNVD-202508-1997
Related CVE
- CNNVD Published: 2025-08-18
Description (Chinese)
My-Blog是ZHENFENG13个人开发者的由 SpringBoot + Mybatis + Thymeleaf 等技术实现的 Java 博客系统，页面美观、功能齐全、部署简单及完善的代码。 My-Blog 1.0.0版本存在安全漏洞，该漏洞源于Frontend Blog Article Comment Handler对认证请求缺乏保护，导致远程攻击者可利用捕获重放方式绕过身份验证。
Description (English)
My-Blog is a Java blog system implemented by ZHENFENG13 individual developers, such as SpringBoot + Mybatis + Thymeleaf, which looks at the page, is fully functional, and deploys simple and perfect codes. The security loophole in version 1.0.0 of My-Blog stems from the lack of protection of the authentication request by Frontend Blog Article Comment Handler, resulting in remote assailants using capture and re-location to bypass identification.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
个人开发者
Published
2025-08-18
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.320422 https://github.com/ZHENFENG13/My-Blog/issues/149 https://github.com/ZHENFENG13/My-Blog/issues/149#issue-3265307853 https://vuldb.com/?submit.628097 https://vuldb.com/?id.320422 https://nvd.nist.gov/vuln/detail/CVE-2025-9100
Share on: