216.73.217.86

CVE-2025-60355

· Published 28/10/2025 18:15 · Modified 28/10/2025 18:15

Labels: CVE-2025-60355 2025-10-28CVE-2025-60355[email protected]

Essential information

Published
28/10/2025 18:15
Modified
28/10/2025 18:15
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

zhangyd-c OneBlog before 2.3.9 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
zhangyd-c / oneblog cpe:2.3:a:zhangyd-c:oneblog:<2.3.9:*:*:*:*:*:*:*

References