4 matches found
CVE-2022-41418
An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...
7.2CVSS7.8AI score0.01156EPSS
SaveExploits0References1
CVE-2022-41418
An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...
7.7AI score0.01156EPSS
SaveExploits0References4
CVE-2022-41418
The CVE-2022-41418 entry concerns BlogEngine.NET v3.3.8.0, where the vulnerability lies in the UploadController.cs under BlogEngine/BlogEngine.NET/AppCode/Api. Uploading a crafted PNG can lead to arbitrary code execution on the server. The issue is rooted in the file upload handling, enabling rem...
7.2CVSS7.2AI score0.01156EPSS
SaveExploits0References4Affected Software1
20