madskristensen/miniblog.core · Security
MadsKristensen.AspNetCore.Miniblog subject to Improper Input Validation
- GHSA ID
- GHSA-958r-g534-ccmr
- CVE ID
- CVE-2019-9845
- Severity
- critical
- Published
- Updated
- CVSS
- 9.8 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3
- 9.8 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in Controllers/BlogController.cs writes a decoded base64 string to a file without validating the extension.
CWEs
- CWE-20 · Improper Input Validation