Lenve Vblog vulnerabilities

CVE-2025-2363 [CRITICAL] CWE-22 CVE-2025-2363: A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0. Affected is the fu A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0. Affected is the function uploadImg of the file blogserver/src/main/java/org/sang/controller/ArticleController.java. The manipulation of the argument filename leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the pub

CVE-2025-3398 [CRITICAL] CWE-266 CVE-2025-3398: A vulnerability classified as critical was found in lenve VBlog up to 1.0.0. Affected by this vulner A vulnerability classified as critical was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function configure of the file blogserver/src/main/java/org/sang/config/WebSecurityConfig.java. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and ma

CVE-2025-2364 [MEDIUM] CWE-79 CVE-2025-2364: A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0. Affected by this vul A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function addNewArticle of the file blogserver/src/main/java/org/sang/service/ArticleService.java. The manipulation of the argument mdContent/htmlContent leads to cross site scripting. The attack can be launched remotely. The exploit has