Medium · 5.4 CVE-2022-47053 EUVD-2022-49830GHSA-6453-4vff-qg82

An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 allows attackers to ex…

Published Apr 12, 2023 · Updated Feb 10, 2025 · Assigned by mitre

Description

An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 allows attackers to execute arbitrary code via a crafted SVG file.

References

https://www.dnnsoftware.com/community/security/security-center
https://www.dnnsoftware.com/community/security/security-center#:~:text=XSS%20in%20Digital%20Asset%20Manager