Lucene search

K
githubGitHub Advisory DatabaseGHSA-V76M-F5CX-8RG4
HistoryOct 16, 2018 - 7:33 p.m.

Moderate severity vulnerability that affects DotNetNuke.Core

2018-10-1619:33:25
CWE-79
GitHub Advisory Database
github.com
8

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

46.0%

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Vulners
Node
dotnetnuke.coreRange<7.4.0
CPENameOperatorVersion
dotnetnuke.corelt7.4.0

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

46.0%

Related for GHSA-V76M-F5CX-8RG4