CVE-2022-41418

Published December 19th, 2022

View on NVD ↗

CVSS v3

7.2

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file.

BlogEngine/BlogEngine.NET

Multi-User ASP.NET Blogging Application

GitHub

990