NetSight
critical9.8

CVE-2022-21142

Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x seri…

Impact

Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to Ver.2.10.43, and Ver.2.11.x series versions prior to Ver.2.11.41 allows a remote unauthenticated attacker to bypass authentication under the specific condition.

Affected products

VendorProductAffected versions
ApplepleA-Blog Cms
from 2.8.0 before 2.8.74
from 2.9.0 before 2.9.39
from 2.10.0 before 2.10.43
from 2.11.0 before 2.11.41

Weakness classification

References