Unknown · Blogengine.Net · CVE-2022-28921
**Name of the Vulnerable Software and Affected Versions**
BlogEngine.Net version 3.3.8.0
**Description**
A Cross-Site Request Forgery (CSRF) issue allows unauthenticated attackers to read arbitrary files on the hosting web server.
**Recommendations**
For BlogEngine.Net version 3.3.8.0, at the moment, there is no information about a newer version that contains a fix for this issue.