Information Disclosure in Oneblog V2.3.9

Publication date: 2026-07-07

Last updated on: 2026-07-07

Assigner: MITRE

Description

An issue in Oneblog V2.3.9 allows a remote attacker to obtain sensitive information via the RestApiController.java, JsApiTicketComponent.java, and the GetAccessTokenComponent.java component

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-07

Last Modified

2026-07-07

Generated

2026-07-08

AI Q&A

2026-07-08

EPSS Evaluated

N/A

NVD

CVE-2026-51937

EUVD

EUVD-2026-42158

Affected Vendors & Products

Vendor	Product	Version / Range
oneblog	oneblog	2.3.9

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in Oneblog V2.3.9 allows a remote attacker to obtain sensitive information by exploiting issues in the RestApiController.java, JsApiTicketComponent.java, and GetAccessTokenComponent.java components.

Impact Analysis

The vulnerability can lead to unauthorized disclosure of sensitive information, which may compromise the confidentiality of data handled by the affected Oneblog application.

Hi! I’m here to help you understand CVE-2026-51937. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70