zhangyd-c OneBlog before 2.3.9 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://github.com/line2222/vuln/issues/4 |
|
History
Tue, 28 Oct 2025 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | zhangyd-c OneBlog before 2.3.9 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-10-28T17:22:03.284Z
Reserved: 2025-09-26T00:00:00.000Z
Link: CVE-2025-60355
No data.
Status : Received
Published: 2025-10-28T18:15:38.983
Modified: 2025-10-28T18:15:38.983
Link: CVE-2025-60355
No data.
OpenCVE Enrichment
No data.