Blogifier

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Blogifier records in CISA KEV

No Blogifier vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Blogifier · all components

TI-2019-09162 CVE-2019-12277 · GHSA-qcx4-gfh8-w5p5

MEDIUM 46

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for ..

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01897 Published 2019-05-22 Fixed in 2.5.5 CWE-22

TI-2022-16078 CVE-2022-35569 · GHSA-fg3r-9xrh-gr48

LOW 23

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00515 Published 2022-07-20 No fix listed CWE-79