CVE-2023-22858

Improper Access Control in BlogEngine.NET version 3.3.8.0

Discovered by Ahsan Aziz on behalf of The Missing Link Security

Vulnerability Details

An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs.

Affected Versions

Discovered in: 3.3.8.0

Latest News

From Phuket with insight: Celebrating partnership success with Cloudflare

The unseen battle: Why you need secure coding now more than ever

The hidden risks of incomplete cyber security visibility

See All News