CVE Catalog

CVE-2023-33405

MediumCVSS 6.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
30.62%

98th percentile - higher than 98% of all known CVEs

Summary

Blogengine.net version 3.3.8.0 and earlier is vulnerable to Open Redirect, which may allow attackers to redirect users to malicious sites.

Risk Assessment

An attacker could exploit this vulnerability to trick users into visiting unsafe websites, potentially leading to data theft or malware.

Recommendation

It is recommended to update Blogengine.net to the latest version to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS