← Database

CVE-2022-28921

MEDIUM CVSS: 6.5 Published: 2022-05-18 Modified: 2026-06-17

Description

A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server.

Affected Platforms

Blogengine Blogengine.Net

Weakness Type

CWE-352

References