CVE-2022-28921

A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server.

Date published : 2022-05-18

https://blogengine.io/

https://www.0xlanks.me/blog/cve-2022-28921-advisory/