NetSight
high7.5

CVE-2019-11392

BlogEngine.NET 3.3.7 and earlier allows XXE via an apml file to syndication.axd.

Impact

BlogEngine.NET 3.3.7 and earlier allows XXE via an apml file to syndication.axd.

Affected products

VendorProductAffected versions
DotnetblogengineBlogengine.Net
through 3.3.7

Weakness classification

References