CVE-2022-41418

概要

参考情報

• gist.github.com/tree-chtsec/22a0a531ea188fd5b76fe11d32f41e95 · Third Party Advisory
• gist.github.com/tree-chtsec/a02258bb6dea0d16e7e631898c066e05 · Third Party Advisory
• BlogEngine/BlogEngine.NET commit 7f92756 · Patch
• chtsecurity.com/news/8719b7f3-1129-4fb4-8801-298970d81df7

blogengine.net のその他の脆弱性

• CVE-2023-33404緊急 9.8An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earl…
• CVE-2023-33405中 6.1Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.
• CVE-2023-22858中 5.3An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs…
• CVE-2023-22857中 5.4A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security contex…
• CVE-2023-22856中 5.4A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security contex…