b3log symphony vulnerabilities

Latest b3log symphony CVEs

Newest publication first

1. CVE-2024-23049 An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component.

   Published 2024-02-05

   Critical·CVSS 9.8 EPSS 1.2%

   An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component.

2. CVE-2019-17488 b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header.

   Published 2019-10-10

   Medium·CVSS 6.1 EPSS 0.82%

   b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header.

3. CVE-2018-16249 In Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is stored in the "articleTitle" JSON field, and executes a payload when accessing the /member/test/points....

   Published 2019-06-20

   Medium·CVSS 4.8 EPSS 0.52%

   In Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is stored in the "articleTitle" JSON field, and executes a payload when accessing the /member/test/points URI, allowing remote attacks. Any Web script or HTML can be inserted by an admin...

4. CVE-2019-9142 Moderate severity vulnerability that affects org.b3log:symphony

   Published 2019-02-25

   Medium·CVSS 6.1 EPSS 0.80%

   An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.

5. CVE-2018-10469 b3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name[] parameter to the /upload URI.

   Published 2018-04-27

   Critical·CVSS 9.8 EPSS 2.1%

   b3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name[] parameter to the /upload URI.

6. CVE-2017-16821 b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For HTTP header that is mishandled during display of a client IP....

   Published 2017-11-15

   Medium·CVSS 5.4 EPSS 0.48%

   b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For HTTP header that is mishandled during display of a client IP address in /admin/user/userid.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.