← CVE Intelligence

CVE-2023-22858

Stored cross-site scripting in BlogEngine.NET version 3.3.8.0 PUBLISHED

Description (CNA)

An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs.

Affected (CNA)

Vendor / productVersions
BlogEngine.NET / BlogEngine.NETaffected 3.3.8.0

CWE

CWE-862, CWE-552

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.