CVE Catalog
CVE-2023-33405
MediumCVSS 6.1Exploitation Probability (EPSS)
Very high risk30.62%
98th percentile - higher than 98% of all known CVEs
Summary
Blogengine.net version 3.3.8.0 and earlier is vulnerable to Open Redirect, which may allow attackers to redirect users to malicious sites.
Risk Assessment
An attacker could exploit this vulnerability to trick users into visiting unsafe websites, potentially leading to data theft or malware.
Recommendation
It is recommended to update Blogengine.net to the latest version to mitigate this vulnerability and conduct a security audit of the application.
Original NVD description (English source)
Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.

