Broken Access Control in Mogu Blog by moxi159753

CVE-2025-13813

What is CVE-2025-13813?

A security issue has been identified in Mogu Blog v2 (versions up to and including 5.2) that stems from improper handling of the Storage Management Endpoint, specifically within the /storage/ file. This vulnerability allows unauthorized users to potentially manipulate storage processes without adequate authorization. The attack can be executed remotely, which increases its potential threat to users. While the complexity of executing an exploit may be considered high, public exploit methods are available, suggesting a pressing need for users to review their security settings. The vendor was notified about this vulnerability; however, no response has been recorded.

References