Security Advisory

CVE-2022-28921

6.5
MEDIUM

Vulnerability Description

A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server.
Published Date May 18, 2022
Official Source NIST NVD Advisory