CVE-2025-2833CWE-1333CWE-400

zhangyd-c OneBlog HTTP Header redos

Medium · published March 27, 2025

CVSS v4.0
6.9
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00729 · 53.7th percentile
Weaknesses
CWE-1333 · Inefficient Regular Expression Complexity; CWE-400 · Uncontrolled Resource Consumption
Published
2025-03-27T04:00Z
EPSS history
Timeline
  • 27 MAR 04:00Z
    zhangyd-c OneBlog HTTP Header redos
    cvelistv5