NetSight
critical9.1

CVE-2022-25591

BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root di…

Impact

BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request.

Affected products

VendorProductAffected versions
BlogengineBlogengine.Net
Version 3.3.8.0

Weakness classification

References