CVE-2019-10721

BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs…

published July 3, 2019

CVSS
—
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00968 · 61.5th percentile
Published
2019-07-03T15:23Z
EPSS history
Timeline
  • 03 JUL 15:23Z
    BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs…
    cvelistv5