Arbitrary Command Execution Vulnerability in a-blog CMS
CVE-2024-31396

Currently unrated

Key Information:

Vendor: Appleple Inc.
Status: A-blog Cms Ver.3.1.x Series; A-blog Cms Ver.3.0.x Series
Vendor: CVE Published:; 22 May 2024

🔔 Create Appleple Inc. Vulnerability Alert

What is CVE-2024-31396?

Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.

Affected Version(s)

a-blog cms Ver.3.0.x series prior to Ver.3.0.32

a-blog cms Ver.3.1.x series prior to Ver.3.1.12

References

https://developer.a-blogcms.jp/blog/news/JVN-70977403.html

https://jvn.jp/en/jp/JVN70977403/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 22, 2024
Vulnerability Reserved
Apr 3, 2024

CVE-2024-31396 Data

JSON