CVE-2019-10720

BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the theme cookie to the File Manager. NOTE: this issue exi...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the theme cookie to the File Manager. NOTE: this issue exists because of an incomplete fix for CVE-2019-6714.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory seclists.org
patch securitymetrics.com
report packetstormsecurity.com