High severity vulnerability that affects DotNetNuke.Core

HIGH 7.5CVE-2017-0929 · GHSA-g8j6-m4p7-5rfq · Published 03/07/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
DotNetNuke.Core NuGet	`< 9.2.0`	`9.2.0`
dotnetnuke dnnsoftware	`< 9.2.0`	`9.2.0`

Description

DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2017-0929 · ADVISORY
dnnsoftware/Dnn.Platform commit d3953db · WEB
GitHub Advisory GHSA-g8j6-m4p7-5rfq · ADVISORY
dnnsoftware/Dnn.Platform · PACKAGE

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free