BlogEngine.NET v3.3.8.0 allows an attacker to create any folder with "files" prefix under ~/App_Data/.

Published Jan 18, 2023 · Updated Apr 3, 2025 · Assigned by mitre