What is GHSA-mmvx-rq8p-h6g9?

GHSA-mmvx-rq8p-h6g9 is a security advisory published by GitHub Security Advisories with High severity. An issue in Oneblog V2.3.9 allows a remote attacker to obtain sensitive information via the...

Which CVE IDs does GHSA-mmvx-rq8p-h6g9 cover?

GHSA-mmvx-rq8p-h6g9 covers the following CVE IDs: CVE-2026-51937. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mmvx-rq8p-h6g9?

GHSA-mmvx-rq8p-h6g9 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-mmvx-rq8p-h6g9HighCVSS 7.5

An issue in Oneblog V2.3.9 allows a remote attacker to obtain sensitive information via the...

Vendor

GitHub Security Advisories

Published

July 8, 2026

Last Modified

July 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-51937 →

📋 Description

An issue in Oneblog V2.3.9 allows a remote attacker to obtain sensitive information via the RestApiController.java, JsApiTicketComponent.java, and the GetAccessTokenComponent.java component

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-51937
https://github.com/zhangyd-c/OneBlog/issues/43
https://developers.weixin.qq.com/doc/offiaccount/Basic_Information/Get_access_token.html
https://gist.github.com/Passwords404/2599df955cdb36b36b9551b5b7809114
https://github.com/advisories/GHSA-mmvx-rq8p-h6g9