Medium severity6.1NVD Advisory· Published Jul 3, 2019· Updated Jun 17, 2026
CVE-2019-10721
CVE-2019-10721
Description
BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- BlogEngine.NET/BlogEngine.NETdescription
- Range: =3.3.7.0
- cpe:2.3:a:dotnetblogengine:blogengine.net:3.3.7.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- github.com/rxtur/BlogEngine.NET/commits/masternvdPatchThird Party Advisory
- www.securitymetrics.com/blog/Blogenginenet-Directory-Traversal-Listing-Login-Page-Unvalidated-RedirectnvdExploitPatchThird Party Advisory
News mentions
0No linked articles in our index yet.