Description
An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BlogEngine.NET | BlogEngine.NET | 3.3.8.0 | — |
Medium · 5.3
CVE-2023-22858
EUVD-2023-26968GHSA-8j76-g3f2-ff7f
Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
Published Mar 6, 2023 · Updated Dec 16, 2025 · Assigned by TML