CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.7. See the original NVD description below for full technical details.
CVE
CVE-2024-25559
Severity
MEDIUM
CVSS
4.7
EPSS
0.45%
Original NVD Description
URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a specially crafted request, the administrator of the product may be forced to access an arbitrary website when clicking a link in the audit log.
Related CVEs
Other vulnerabilities affecting the same vendor(s)