← All advisories

High severity7.5NVD Advisory· Published Jun 21, 2019· Updated Jun 17, 2026

CVE-2019-11392

CVE-2019-11392

Description

BlogEngine.NET 3.3.7 and earlier allows XXE via an apml file to syndication.axd.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

BlogEngine.NET/BlogEngine.NETdescription
BlogEngine.NET/BlogEngine.NETllm-fuzzy
Range: <=3.3.7
Dotnetblogengine/Blogengine.net
cpe:2.3:a:dotnetblogengine:blogengine.net:*:*:*:*:*:*:*:*
Range: <=3.3.7

Patches

Vulnerability mechanics

References

1

www.securitymetrics.com/blog/blogenginenet-xml-external-entity-attacksnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.