CVE-2022-28921

A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting…

published May 18, 2022

CVSS
—
EPSS
1%
Percentile
54.1
In the wild
Unconfirmed
What it is

A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00740 · 54.1th percentile
Published
2022-05-18T17:11Z
EPSS history
Timeline
  • 18 MAY 17:11Z
    A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting…
    cvelistv5