Lucene search

K
githubGitHub Advisory DatabaseGHSA-MJ48-F959-PQPH
HistoryMay 17, 2022 - 4:49 a.m.

DotNetNuke (DNN) Open redirect vulnerability

2022-05-1704:49:44
CWE-20
CWE-601
GitHub Advisory Database
github.com
11
dotnetnuke
open redirect vulnerability
remote attackers
phishing attacks

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

65.7%

Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected configurations

Vulners
Node
dotnetnuke.coreRange7.07.1.1
OR
dotnetnuke.coreRange<6.2.9
VendorProductVersionCPE
*dotnetnuke.core*cpe:2.3:a:*:dotnetnuke.core:*:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

65.7%