CVE-2024-30420 — appleple inc. / a-blog cms Ver.3.1.x series

Description (CNA)

Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may obtain arbitrary files on the server and information on the internal server that is not disclosed to the public.

Affected (CNA)

Vendor / product	Versions
appleple inc. / a-blog cms Ver.3.1.x series	affected prior to Ver.3.1.12
appleple inc. / a-blog cms Ver.3.0.x series	affected prior to Ver.3.0.32

CWE

No CWE identifiers supplied.

References

https://developer.a-blogcms.jp/blog/news/JVN-70977403.html
https://jvn.jp/en/jp/JVN70977403/

ADP enrichment

CVE

No English description supplied.

https://developer.a-blogcms.jp/blog/news/JVN-70977403.html
https://jvn.jp/en/jp/JVN70977403/

CISA-ADP

No English description supplied.

No references supplied.