Title: Open Redirection Vulnerability · Issue #268 · BlogEngine/BlogEngine.NET · GitHub
Open Graph Title: Open Redirection Vulnerability · Issue #268 · BlogEngine/BlogEngine.NET
X Title: Open Redirection Vulnerability · Issue #268 · BlogEngine/BlogEngine.NET
Description: There is no validation for the year and month variables line between 158-160 on default.aspx.cs. Additionally, these parameters were used to build another variable named "rewrite", and the "rewrite" parameter is being used within a redir...
Open Graph Description: There is no validation for the year and month variables line between 158-160 on default.aspx.cs. Additionally, these parameters were used to build another variable named "rewrite", and the "rewrite...
X Description: There is no validation for the year and month variables line between 158-160 on default.aspx.cs. Additionally, these parameters were used to build another variable named "rewrite", and th...
Opengraph URL: https://github.com/BlogEngine/BlogEngine.NET/issues/268
X: @github
Domain: patch-diff.githubusercontent.com
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Open Redirection Vulnerability","articleBody":"There is no validation for the year and month variables line between 158-160 on default.aspx.cs.\r\nAdditionally, these parameters were used to build another variable named \"rewrite\", and the \"rewrite\" parameter is being used within a redirection. (Line 183 default.aspx.cs) \r\n\r\n it can be used for redirecting the user to a malicious web page.","author":{"url":"https://github.com/hacip","@type":"Person","name":"hacip"},"datePublished":"2023-06-20T18:03:34.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/268/BlogEngine.NET/issues/268"}
| route-pattern | /_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format) |
| route-controller | voltron_issues_fragments |
| route-action | issue_layout |
| fetch-nonce | v2:64c06a7f-5702-be25-019a-0b1ff4d84af9 |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | A6DE:1DD9ED:1AB3A4D:253F852:697280CA |
| html-safe-nonce | 7bc4264d4a1b6db0f3d04d7c0a7588431980438fbdeac34356508ed66d09edd0 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBNkRFOjFERDlFRDoxQUIzQTREOjI1M0Y4NTI6Njk3MjgwQ0EiLCJ2aXNpdG9yX2lkIjoiNTAyMzEyMDY5MDAzNDkzMzk2MiIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 82095baed15b31f07cbc65a92054e51557e3ddbc390c2e9f90222e9b00adfb48 |
| hovercard-subject-tag | issue:1765892839 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/BlogEngine/BlogEngine.NET/268/issue_layout |
| twitter:image | https://opengraph.githubassets.com/4537aaf49838ec7a87533c6c6e85b07f1b5d8b938541834ba5689db0d87f03d3/BlogEngine/BlogEngine.NET/issues/268 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/4537aaf49838ec7a87533c6c6e85b07f1b5d8b938541834ba5689db0d87f03d3/BlogEngine/BlogEngine.NET/issues/268 |
| og:image:alt | There is no validation for the year and month variables line between 158-160 on default.aspx.cs. Additionally, these parameters were used to build another variable named "rewrite", and the "rewrite... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | hacip |
| hostname | github.com |
| expected-hostname | github.com |
| None | f3cc591a09ecfa43f68be4fde9ec95eccfdf6298db2cd7d08e9eae6c9f833329 |
| turbo-cache-control | no-preview |
| go-import | github.com/BlogEngine/BlogEngine.NET git https://github.com/BlogEngine/BlogEngine.NET.git |
| octolytics-dimension-user_id | 16548097 |
| octolytics-dimension-user_login | BlogEngine |
| octolytics-dimension-repository_id | 35853835 |
| octolytics-dimension-repository_nwo | BlogEngine/BlogEngine.NET |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 35853835 |
| octolytics-dimension-repository_network_root_nwo | BlogEngine/BlogEngine.NET |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 208d56d4b5936bcb8a1d3b43096d573261817603 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width