Description
DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversal (issue 2 of 2).
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | DotNetNuke.Core | < 9.5.0 | 9.5.0 | GHSA-4qf5-7xc2-wqpg |
High · 8.8
CVE-2020-5187
EUVD-2022-2427GHSA-4qf5-7xc2-wqpg
DNN Path Traversal via Zip Slip
Published Feb 24, 2020 · Updated Aug 4, 2024 · Assigned by mitre