CVE-2019-10720

BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the theme cookie to the File Manager. NOTE: this issue exi...

Original description

The description as published by the source.

BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the theme cookie to the File Manager. NOTE: this issue exists because of an incomplete fix for CVE-2019-6714.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory seclists.org
patch securitymetrics.com
report packetstormsecurity.com