EUVD-2026-76137
GHSA-7hrx-vv78-95j8
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable endpoint, low-privilege authenticated session required, integrity-only impact limited to comment authorship forgery, no scope change.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
4DescriptionCVE.org
MoguBlog through 6.2 fails to validate the comment author identity in the POST /web/comment/add endpoint, allowing authenticated users to post comments attributed to any other user. Attackers can supply arbitrary userUid values in the request body to impersonate other accounts including administrators.
AnalysisAI
Comment author spoofing in MoguBlog through version 6.2 allows any authenticated user to post comments attributed to arbitrary accounts - including administrators - by supplying an attacker-controlled userUid value in the POST /web/comment/add request body. The server performs no server-side validation that the submitted userUid matches the authenticated session identity, making this a classic IDOR (Insecure Direct Object Reference) flaw under CWE-639. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid authenticated session on the target MoguBlog instance - an attacker must hold at least a low-privilege registered user account (PR:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) accurately reflects the limited blast radius: exploitation requires a valid authenticated session, and the impact is confined to integrity - specifically, the ability to forge comment authorship. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No patched release has been confirmed in the references at time of analysis - the Gitee releases page (https://gitee.com/moxi159753/mogu_blog_v2/releases) should be monitored for an update. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated arbitrary comment deletion in MoguBlog through 6.2 allows remote attackers to permanently remove any com
Unauthenticated XML external entity injection in MoguBlog through version 6.2 allows remote attackers to read arbitrary
Unauthenticated integrity manipulation in MoguBlog through 6.2 allows any remote caller to silently disable email reply
Unauthenticated access to Elasticsearch index management endpoints in MoguBlog's mogu_search microservice (through versi
A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2. Rated medium sev
Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS). Rated medium severity (CVSS 6.1), this vulnerability is remot
Server-side request forgery in Mogu Blog v2 up to version 5.2 allows remote, unauthenticated attackers to force the serv
Missing authorization on a MoguBlog admin-backend endpoint allows authenticated back-office users to retrieve image-cate
Missing authorization in the Storage Management Endpoint of Mogu Blog v2 (up to version 5.2) enables unauthenticated rem
Authenticated path traversal in Mogu Blog v2 up to 5.2 allows remote attackers to write files to arbitrary directories v
Unrestricted file upload in Mogu Blog v2 up to version 5.2 allows remote attackers with low privileges to upload arbitra
Share
External POC / Exploit Code
Leaving vuln.today