CVE-2019-10718

BlogEngine.NET 3.3.7.0 and earlier allows XML External Entity Blind Injection, related to pingback.axd and BlogEngine.Core/Web/HttpHandlers/PingbackHandler.cs

published June 21, 2019

CVSS
—
EPSS
3%
Percentile
85.6
In the wild
Unconfirmed
What it is

BlogEngine.NET 3.3.7.0 and earlier allows XML External Entity Blind Injection, related to pingback.axd and BlogEngine.Core/Web/HttpHandlers/PingbackHandler.cs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02657 · 85.6th percentile
Published
2019-06-21T18:23Z
EPSS history
Timeline
  • 21 JUN 18:23Z
    BlogEngine.NET 3.3.7.0 and earlier allows XML External Entity Blind Injection, related to pingback.axd and BlogEngine.Core/Web/HttpHandlers/PingbackHandler.cs
    cvelistv5