EUVD-2026-76135
GHSA-7vp6-9cc5-c2c2
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible endpoint with no authentication requirement per PR:N vector; ownership check is entirely client-controlled with no confidentiality or availability impact - integrity-only.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
6DescriptionCVE.org
MoguBlog through 6.2 contains an authorization bypass vulnerability in the comment deletion endpoint that performs ownership checks against request-body fields instead of the authenticated principal. Attackers can delete arbitrary comments and their replies by supplying comment UIDs and author UIDs obtained from unauthenticated listing endpoints.
AnalysisAI
Unauthenticated arbitrary comment deletion in MoguBlog through 6.2 allows remote attackers to permanently remove any comment or reply thread on the platform without credentials. The comment delete endpoint (CommentRestApi.java) validates ownership by comparing attacker-supplied authorUid/ownerUid values from the HTTP request body against stored records - a CWE-639 IDOR - instead of checking against the server-side authenticated session principal. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The comment delete endpoint must be network-reachable (standard for any publicly hosted MoguBlog instance). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.5 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) accurately characterizes the core risk profile: no authentication barrier, no attack complexity, and full integrity impact on comment data achievable over the network. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patched version number is confirmed in the available input data; the references point to the source repository and a VulnCheck advisory without specifying a fixed release tag. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: restrict all access to the CommentRestApi delete endpoint to authenticated administrators only using a web application firewall or reverse proxy layer; audit deletion logs for unauthorized activity and document any comments deleted by unauthenticated sources. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated XML external entity injection in MoguBlog through version 6.2 allows remote attackers to read arbitrary
Unauthenticated integrity manipulation in MoguBlog through 6.2 allows any remote caller to silently disable email reply
Unauthenticated access to Elasticsearch index management endpoints in MoguBlog's mogu_search microservice (through versi
A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2. Rated medium sev
Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS). Rated medium severity (CVSS 6.1), this vulnerability is remot
Server-side request forgery in Mogu Blog v2 up to version 5.2 allows remote, unauthenticated attackers to force the serv
Missing authorization on a MoguBlog admin-backend endpoint allows authenticated back-office users to retrieve image-cate
Comment author spoofing in MoguBlog through version 6.2 allows any authenticated user to post comments attributed to arb
Missing authorization in the Storage Management Endpoint of Mogu Blog v2 (up to version 5.2) enables unauthenticated rem
Authenticated path traversal in Mogu Blog v2 up to 5.2 allows remote attackers to write files to arbitrary directories v
Unrestricted file upload in Mogu Blog v2 up to version 5.2 allows remote attackers with low privileges to upload arbitra
Share
External POC / Exploit Code
Leaving vuln.today