CVE-2023-33405

Summary

CVE-2023-33405 is a newly discovered vulnerability affecting Blogengine.net version 3.3.8.0 and earlier. This issue allows an attacker to execute an open redirect, manipulating the URLs in a way that can redirect users to malicious websites. As a result, user sessions can be hijacked, and sensitive information can be stolen. Users are strongly urged to upgrade to the latest version of Blogengine.net to mitigate this risk. Failure to do so may result in unauthorized access and data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.