CVE-2024-13190
CVSS 2.0 Score 6.5 of 10 (medium)
Details
Published Jan 8, 2025
CWE ID 91
CWE ID 74
Summary
CVE-2024-13190 is a critical vulnerability discovered in ZeroWdd myblog 1.0. The issue lies within the unknown code of the file src/main/resources/mapper/BlogMapper.xml. A remote attacker can exploit this vulnerability by manipulating the argument findBlogList/getTotalBlogs, leading to xml injection. The exploit for this vulnerability has been made public, increasing the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.