PT-2025-33436 · Mtons · Mtons Mblog

Zast.Ai · Published 2025-08-15 · Updated 2025-08-18 · CVE-2025-9005

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: mtons mblog versions prior to 3.5.1

Description: A vulnerability exists in mtons mblog up to version 3.5.0. The issue affects an unknown function within the /register endpoint and leads to information exposure through error messages. The attack can be launched remotely, but is considered to have relatively high complexity and difficult exploitability. The exploit has been publicly disclosed and may be used.

Recommendations: Update mtons mblog to version 3.5.1 or later.

Exploit

Fix

Generation of Error Message Containing Sensitive Information

Information Disclosure

Weakness Enumeration

CWE-209

CWE-200

Related Identifiers

CVE-2025-9005

Affected Products

Mtons Mblog

References · 10

• 🔥 https://gitee.com/mtons/mblog/issues/ICPMJO · Exploit
• https://osv.dev/vulnerability/CVE-2025-9005 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9005 · Security Note
• https://t.me/cveNotify/132717 · Telegram Post
• https://vuldb.com/?id.320034 · Note
• https://twitter.com/CVEnew/status/1956289039864357307 · Twitter Post
• https://vuldb.com/?submit.628787 · Note
• https://t.me/CVEtracker/30083 · Telegram Post
• https://vuldb.com/?ctiid.320034 · Note
• https://twitter.com/VulmonFeeds/status/1956381573529456961 · Twitter Post