CVE-2018-14485

BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.

mitre·CWE-611·Published 2019-05-07

CVSS

—

EPSS

0.16

KEV

Exploits

cve.orgen

74 chars

BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.

NVDen

74 chars

BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.

NVDes

104 chars

BlogEngine.NET 3.3 permite ataques XEE (XML External Entity) a metaweblog.axd través del cuerpo de POST.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.0	Primary	NVD	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H