Back to Database
Status published
Unknown
CVE-2024-25559
URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8....
Vulnerability Description
URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a specially crafted request, the administrator of the product may be forced to access an arbitrary website when clicking a link in the audit log.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-25559
Credits & Attribution
No credits recorded in the NVD database.
References
More from appleple inc.
View All →CVE-2025-41429
a-blog cms multiple versions neutralize logs improperly. If this vulnerability...
Low
2.1
CVE-2025-36560
Server-side request forgery vulnerability exists in a-blog cms multiple versions....
Critical
9.2
CVE-2025-32999
Cross-site scripting vulnerability exists in a-blog cms versions prior to...
Medium
4.8
CVE-2025-31103
Untrusted data deserialization vulnerability exists in a-blog cms. Processing a...
High
7.5
CVE-2025-27566
Path traversal vulnerability exists in a-blog cms versions prior to...
Medium
5.1
Affected Vendor
appleple inc.
View all reports →Affected Software
a-blog cms
Vulnerable Versions:
Ver.3.1.0 to Ver.3.1.8
Timeline
Official Publish:
February 15th, 2024
Last Modified:
November 1st, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.