CVE-2022-25591
BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web serve...
Original description
The description as published by the source.
BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory 0xlanks.me
- web blogengine.io