CVE-2020-5187

2020-02-2415:15:11

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.9%

JSON

DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversal (issue 2 of 2).

CPENameOperatorVersion
dnn.platformeq9.4.0-rc0
dnn.platformeq9.4.3
dnn.platformeq9.4.2
dnn.platformeq9.4.1
dnn.platformeq9.2.1-rc1
dnn.platformeq9.3.1-rc0
dnn.platformeq9.2.2-rc0
dnn.platformeq9.2.1-rc0
dnn.platformeq9.3.1
dnn.platformeq9.4.2-rc1

Name	Operator	Version
dnn.platform	eq	9.4.0-rc0
dnn.platform	eq	9.4.3
dnn.platform	eq	9.4.2
dnn.platform	eq	9.4.1
dnn.platform	eq	9.2.1-rc1
dnn.platform	eq	9.3.1-rc0
dnn.platform	eq	9.2.2-rc0
dnn.platform	eq	9.2.1-rc0
dnn.platform	eq	9.3.1
dnn.platform	eq	9.4.2-rc1