Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

moxi624 — Vulnerabilities & Security Advisories 13

Browse all 13 CVE security advisories affecting moxi624. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page provides a comprehensive aggregation of security vulnerabilities associated with the vendor moxi624, focusing on a wide range of common weakness classifications. The content collects data on critical security flaws, including cross-site scripting, buffer overflows, and information disclosure issues, covering the period from January 1, 2018, through December 31, 2023. By reviewing this curated dataset, users can efficiently track a specific vendor's security advisory history and observe the evolution of their risk posture over time. The aggregation serves as a centralized resource for understanding the prevalence and impact of specific weakness classes within the moxi624 ecosystem, allowing analysts to identify patterns in software reliability and maintenance practices. Readers can look up individual products to view their unique vulnerability history, which aids in assessing supply chain risks and evaluating the overall security maturity of the vendor. This structured approach helps security professionals, developers, and auditors quickly locate relevant flaw data without searching through disparate sources, thereby streamlining the process of vulnerability management and risk assessment. The information is organized to facilitate deeper analysis of how specific types of defects affect different product lines, offering valuable insights for patch prioritization and long-term security planning.

Top products by moxi624: MoguBlog Mogu Blog v2
CVE ID Title CVSS Severity Published
CVE-2026-109177 MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and edit — MoguBlog CWE-639 4.3 Medium 2026-10-12
CVE-2026-109176 MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Files — MoguBlog CWE-639 5.4 Medium 2026-10-12
CVE-2026-109175 MoguBlog through 6.2 Broken Access Control via /networkDisk/getFileList — MoguBlog CWE-639 4.3 Medium 2026-10-12
CVE-2026-109174 MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig — MoguBlog CWE-863 6.5 Medium 2026-10-12
CVE-2026-90568 moxi624 Mogu Blog v2 blogSort Endpoint info.ftl BlogSortServiceImpl.addBlogSort cross site scripting — Mogu Blog v2 CWE-79 3.5 Low 2026-09-13
CVE-2026-89264 MoguBlog through 6.2 Comment Author Spoofing via Request-Body Identity — MoguBlog CWE-639 4.3 Medium 2026-09-11
CVE-2026-89265 MoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid Endpoint — MoguBlog CWE-862 4.3 Medium 2026-09-11
CVE-2026-89263 MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint — MoguBlog CWE-306 5.3 Medium 2026-09-11
CVE-2026-89262 MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check — MoguBlog CWE-639 7.5 High 2026-09-11
CVE-2026-89260 MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint — MoguBlog CWE-611 7.5 High 2026-09-11
CVE-2026-89261 MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints — MoguBlog CWE-306 6.5 Medium 2026-09-11
CVE-2026-6625 moxi624 Mogu Blog v2 Picture Storage Service LocalFileServiceImpl.java LocalFileServiceImpl.uploadPictureByUrl server-side request forgery — Mogu Blog v2 CWE-918 7.3 High 2026-04-20
CVE-2023-2101 moxi624 Mogu Blog v2 uploadPicsByUrl uploadPictureByUrl absolute path traversal — Mogu Blog v2 CWE-36 4.3 Medium 2023-04-15

This page lists every published CVE security advisory associated with moxi624. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.