← All advisories

Critical severity9.8NVD Advisory· Published May 22, 2019· Updated Jun 17, 2026

CVE-2019-12277

CVE-2019-12277

Description

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
Blogifier.CoreNuGet	< 2.5.5	2.5.5

Affected products

3

Blogifier/Blogifier
cpe:2.3:a:blogifier:blogifier:2.3:*:*:*:*:*:*:*
Blogifier/Blogifierdescription
ghsa-coords
pkg:nuget/blogifier.core
Range: < 2.5.5

Patches

Vulnerability mechanics

References

3

github.com/blogifierdotnet/Blogifier/commit/3e2ae11f6be8aab82128f223c2916fab5a408be5nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-qcx4-gfh8-w5p5ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-12277ghsaADVISORY

News mentions

0

No linked articles in our index yet.