CVE-2019-10720

BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the theme cookie to the File Manager

published June 21, 2019

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the theme cookie to the File Manager. NOTE: this issue exists because of an incomplete fix for CVE-2019-6714.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07006 · 94.1th percentile
Published
2019-06-21T18:13Z
EPSS history
Timeline
  • 21 JUN 18:13Z
    BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the theme cookie to the File Manager
    cvelistv5