← Database

CVE-2022-25591

CRITICAL CVSS: 9.1 Published: 2022-05-13 Modified: 2026-06-17

Description

BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request.

Affected Platforms

Blogengine Blogengine.Net

Weakness Type

CWE-22

References