CVE-2024-23182

Name of the Vulnerable Software and Affected Versions a-blog cms versions prior to 2.9.1 a-blog cms versions 2.9.0 and earlier a-blog cms versions 2.10.x through 2.10.49 a-blog cms versions 2.11.x through 2.11.57 a-blog cms versions 3.0.x through 3.0.28 a-blog cms versions 3.1.x through 3.1.6

Description The issue allows a remote authenticated attacker to delete arbitrary files on the server due to a relative path traversal vulnerability.

Recommendations For versions 2.9.0 and earlier, update to version 2.9.1 or later. For versions 2.10.x through 2.10.49, update to version 2.10.50 or later. For versions 2.11.x through 2.11.57, update to version 2.11.58 or later. For versions 3.0.x through 3.0.28, update to version 3.0.29 or later. For versions 3.1.x through 3.1.6, update to version 3.1.7 or later.