CNNVD-202508-790 Information

Aug 08, 2025 cve

CNNVD ID

CNNVD-202508-790

CVE-2025-8739

CNNVD Published: 2025-08-08

Description (Chinese)

My-Blog是ZHENFENG13个人开发者的由 SpringBoot + Mybatis + Thymeleaf 等技术实现的 Java 博客系统，页面美观、功能齐全、部署简单及完善的代码。 My-Blog 1.0.0及之前版本存在安全漏洞，该漏洞源于对参数tagName的错误操作导致跨站请求伪造。

Description (English)

My-Blog is a Java blog system implemented by ZHENFENG13 individual developers, such as SpringBoot + Mybatis + Thymeleaf, which looks at the page, is fully functional, and deploys simple and perfect codes. There is a security loophole in My-Blog 1.0.0 and previous versions, which stems from the error of the parameter TagName, which resulted in a cross-site request for forgery.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-08-08

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.319235 https://vuldb.com/?id.319235 https://vuldb.com/?submit.623479 https://github.com/ZHENFENG13/My-Blog/issues/145 https://nvd.nist.gov/vuln/detail/CVE-2025-8739 https://access.redhat.com/security/cve/cve-2025-8739

Share on: