B3Log Symphony vulnerabilities

7 vulnerabilities

Known vulnerabilities in B3Log Symphony, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.9CVE-2026-110105b3logsymphony
EPSS score
0.29%
B3log Symphony through 3.6.4 contains a missing authorization vulnerability that allows unauthenticated attackers to reach admin routes because PermissionMidware.check permits routes lacking permission.rule.url entries. Attackers can request /admin/report/ignore/{reportId}, /admin/tags/remove-unused, or /admin/user/{userId}/init-point to ignore reports, delete unused tags, or grant points without audit logging.4.8CVE-2018-16249b3logsymphony
EPSS score
0.52%
In Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is stored in the "articleTitle" JSON field, and executes a payload when accessing the /member/test/points URI, allowing remote attacks. Any Web script or HTML can be inserted by an admin-authenticated user via a crafted web site name.9.8CVE-2018-10469b3logsymphony
EPSS score
2.08%
b3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name[] parameter to the /upload URI.5.4CVE-2017-16821b3logsymphony
EPSS score
0.48%
b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For HTTP header that is mishandled during display of a client IP address in /admin/user/userid.9.8CVE-2024-23049b3logsymphony
EPSS score
1.17%
An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component.6.1CVE-2019-9142b3logsymphony+1
EPSS score
0.80%
An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.6.1CVE-2019-17488b3logsymphony
EPSS score
0.82%
b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header.