CVE-2022-28921

creationtimestamp| type| source ---|---|--- 2022-05-18 23:30:51+00:00| seen| https://t.me/cibsecurity/42953...

CVE-2022-28921

CVE-2022-28921 affects BlogEngine.Net v3.3.8.0. The vulnerability is a Cross-Site Request Forgery (CSRF) that allows unauthenticated attackers to read arbitrary files on the hosting web server. The sources consistently describe the issue as CSRF with file-read impact, but a concrete root-cause an...