Security Advisory
CVE-2022-28921
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server.