BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-07-03T15:23:03
Updated: 2024-08-04T22:32:01.337Z
Reserved: 2019-04-02T00:00:00
Link: CVE-2019-10721
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-07-03T16:15:10.833
Modified: 2019-07-10T16:55:19.407
Link: CVE-2019-10721
Redhat
No data.