← All advisories

High severity7.1NVD Advisory· Published Jul 3, 2019· Updated Jun 17, 2026

CVE-2019-10717

CVE-2019-10717

Description

BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

BlogEngine.NET/BlogEngine.NETdescription
BlogEngine.NET/BlogEngine.NETllm-fuzzy
Range: <=3.3.7.0
Dotnetblogengine/Blogengine.net
cpe:2.3:a:dotnetblogengine:blogengine.net:3.3.7.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

github.com/rxtur/BlogEngine.NET/commits/masternvdPatchThird Party Advisory
www.securitymetrics.com/blog/Blogenginenet-Directory-Traversal-Listing-Login-Page-Unvalidated-RedirectnvdExploitPatchThird Party Advisory
seclists.org/fulldisclosure/2019/Jun/44nvdMailing ListThird Party Advisory

News mentions

0

No linked articles in our index yet.