CVE-2019-12277: Blogifier

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname.

Affected products

• Blogifier Blogifier: version 2.3 only

Published 2019-05-22. Last modified 2026-06-17.