BlogEngine path traversal vulnerability (CNVD-2019-21427)

BlogEngine is an open source ASP.NET blog system . The system supports Ajax comments , custom themes and so on. A path traversal vulnerability exists in BlogEngine version 3.3.7.0. The vulnerability stems from a failure of a network system or product to properly filter special elements in the pat...