CVE-2019-10719

BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution because file creation is mishandled, related to /api/upload and…

published June 21, 2019

CVSS
—
EPSS
7%
Percentile
94.5
In the wild
Unconfirmed
What it is

BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution because file creation is mishandled, related to /api/upload and BlogEngine.NET/AppCode/Api/UploadController.cs. NOTE: this issue exists because of an incomplete fix for CVE-2019-6714.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07458 · 94.5th percentile
Published
2019-06-21T18:11Z
EPSS history
Timeline
  • 21 JUN 18:11Z
    BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution because file creation is mishandled, related to /api/upload and…
    cvelistv5