Unrated

BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security...

CVE-2019-10721 First seen on SecPulse Jul 4, 2019

Original description The description as published by the source.

BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch github.com
patch securitymetrics.com

Key facts

Severity: Unrated
Published: Jul 4, 2019
First seen on SecPulse: Jul 4, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50