a-blog cms Ver.2.11.x series vulnerabilities

3 known vulnerabilities in a-blog cms Ver.2.11.x series from Appleple. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  a-blog cms (Ver.3.1.x series): Deserialization of Untrusted Data

  CVE-2025-31103Mar 31, 2025Appleple

  Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the server where the product is running. This can be leveraged to execute an arbitrary script on the server.

• 8.1 High severity

  a-blog cms Ver.3.1.x series: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-23182Jan 23, 2024Appleple

  Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and

• 8.8 High severity

  a-blog cms Ver.3.1.x series: Unrestricted Upload of File with Dangerous Type

  CVE-2024-23180Jan 23, 2024Appleple

  Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 a