CNNVD-202508-791 Information
CNNVD ID
CNNVD-202508-791
Related CVE
- CNNVD Published: 2025-08-08
Description (Chinese)
My-Blog是ZHENFENG13个人开发者的由 SpringBoot + Mybatis + Thymeleaf 等技术实现的 Java 博客系统，页面美观、功能齐全、部署简单及完善的代码。 My-Blog 1.0.0及之前版本存在代码注入漏洞，该漏洞源于对参数categoryName的错误操作导致跨站脚本。
Description (English)
My-Blog is a Java blog system implemented by ZHENFENG13 individual developers, such as SpringBoot + Mybatis + Thymeleaf, which looks at the page, is fully functional, and deploys simple and perfect codes. My-Blog 1.0.0 and previous versions have a code-injecting loophole, which results from an error in the action of the parameter Category Name, resulting in a cross-site script.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
个人开发者
Published
2025-08-08
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.319236 https://vuldb.com/?submit.623480 https://github.com/ZHENFENG13/My-Blog/issues/146 https://github.com/ZHENFENG13/My-Blog/issues/146#issue-3265304545 https://vuldb.com/?id.319236 https://access.redhat.com/security/cve/cve-2025-8740 https://nvd.nist.gov/vuln/detail/CVE-2025-8740
Share on: