CVE-2025-2833

Name of the Vulnerable Software and Affected Versions zhangyd-c OneBlog versions up to 2.3.9

Description A vulnerability was found in the HTTP Header Handler component. The manipulation of the X-Forwarded-For argument leads to inefficient regular expression complexity, allowing for a remote attack.

Recommendations For versions up to 2.3.9, consider restricting access to the HTTP Header Handler component until a patch is available. As a temporary workaround, avoid using the X-Forwarded-For argument in the affected HTTP Header Handler component until the issue is resolved.