VBlog vulnerabilities

2 known vulnerabilities in VBlog from Lenve. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  VBlog: Incorrect Privilege Assignment

  CVE-2025-3398Apr 8, 2025Lenve

  A vulnerability classified as critical was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function configure of the file blogserver/src/main/java/org/sang/config/WebSecurityConfig.java. The manipulation leads to improper access control

• 9.8 Critical severity

  VBlog: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-2363Mar 17, 2025Lenve

  A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0. Affected is the function uploadImg of the file blogserver/src/main/java/org/sang/controller/ArticleController.java. The manipulation of the argument filename leads to path traver