A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vulnerability is the function LocalFileServiceImpl.uploadPictureB…

A server-side request forgery (SSRF) vulnerability has been discovered in moxi624 Mogu Blog v2 up to version 5.2. The vulnerability affects the LocalFileServiceImpl.uploadPictureByUrl function in the Picture Storage Service component. The flaw can be exploited remotely and allows attackers to manipulate server-side requests. The exploit has been publicly disclosed and is available for use. The vendor was contacted about the vulnerability but has not responded to the disclosure.