blogifierdotnet/Blogifier

Releases16

Frequency3 months 3 weeks

Last Release over 4 years ago

Stars1.3K

Blogifier is an open-source publishing platform Written in ASP.NET and Blazor WebAssembly. With Blogifier make a personal blog or a website.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-35569 ↗	Jul 20, 2022Wednesday, 20 July 2022, 18:15	4.8 MEDIUM	—
Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file.
CVE-2019-12277 ↗	May 22, 2019Wednesday, 22 May 2019, 15:29	—	7.5 HIGH
Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname.