CVE-2025-5511

Name of the Vulnerable Software and Affected Versions quequnlong shiyi-blog versions up to 1.2.1

Description A critical issue has been found in quequnlong shiyi-blog, affecting some unknown processing of the file /dev api/app/album/photos/. This leads to improper authorization, and the attack may be initiated remotely.

Recommendations For versions up to 1.2.1, as a temporary workaround, consider restricting access to the /dev api/app/album/photos/ endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.