CVE-2025-41429

View on CVE.org
Published May 19, 2025 CVSS 4.0 · 2.1 Low EPSS < 1% KEV · Not listed
Description
a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user's session.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-15667 a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user's session.
History
Type Values Removed Values Added
First Time appeared Appleple
Appleple a-blog Cms
CPEs cpe:2.3:a:appleple:a-blog_cms:*:*:*:*:*:*:*:*
Vendors & Products Appleple
Appleple a-blog Cms
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user's session.
Weaknesses CWE-117
References
Metrics cvssV3_1

{'score': 4.8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'}

cvssV4_0

{'score': 2.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N'}
Weaknesses
  • CWE-117

    Improper Output Neutralization for Logs

Sources

Status
PUBLISHED
Assigner
jpcert
Published
Updated
May 19, 2025, 3:46 PM
Reserved
May 12, 2025, 11:37 PM

View source JSON

Updated
May 19, 2025, 3:46 PM

JSON

Status
Analyzed
Published
May 19, 2025, 9:15 AM
Modified
Jun 17, 2026, 9:22 AM

View source JSON

No data.

No data.