CVE-2022-41417

Published January 18th, 2023

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

1

PROJECT

Description

BlogEngine.NET v3.3.8.0 allows an attacker to create any folder with "files" prefix under ~/App_Data/.

BlogEngine/BlogEngine.NET

Multi-User ASP.NET Blogging Application

GitHub

990