CVE-2023-33405

Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

31.26% chance of exploitation in the next 30 days, 98th percentile

Nuclei

medium · CWE-601

Published

2023-06-21

Updated

2024-12-06

Proof-of-concept exploits (1)

• hacip/CVE-2023-334050★ · 2023-06-20

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33405.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2023-33404
• CVE-2023-33408
• CVE-2023-3340
• CVE-2023-33409
• CVE-2023-3339
• CVE-2023-33410