Unscored CVE-2022-28921 EUVD-2022-33356GHSA-f73j-5m2f-qvhw

A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary …

Published May 18, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server.

References

https://blogengine.io/
https://www.0xlanks.me/blog/cve-2022-28921-advisory/