CVE-2019-12277 - Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .

CRITICAL

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .

Published May 22, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 1.90%

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname.

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3918		Advisory
https://github.com/advisories/GHSA-qcx4-gfh8-w5p5		Advisory
https://github.com/blogifierdotnet/Blogifier/commit/3e2ae11f6be8aab82128f223c2916fab5a408be5		x_refsource_MISCPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-12277