a-blog cms Server-Side Request Forgery Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in a-blog cms, affecting multiple versions. This vulnerability allows remote, unauthenticated attackers to access sensitive information by sending specially crafted requests.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information on the server.

Remediation

Users are advised to update a-blog cms to the latest version. For versions 3.1.43 and earlier, 3.0.47 and earlier, and 2.11.75 and earlier, specific update instructions can be found on the a-blog cms developer site. Additionally, a workaround is available by setting 'HOOK_ENABLE' to '1' in 'config.server.php' and modifying 'extension/acms/Hook.php' or 'php/ACMS/User/Hook.php'.