Skip to content
OpenAdvisories

Package · NuGet

MadsKristensen.AspNetCore.Miniblog

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2019-9845

    MadsKristensen.AspNetCore.Miniblog subject to Improper Input Validation

    madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in Controllers/BlogController.cs writes a decoded base64 string to a file without validating th…

    MadsKristensen.AspNetCore.Miniblog NuGet