DNN vulnerable to Relative Path Traversal

MEDIO 4.9CVE-2022-2922 · GHSA-9w72-2f23-57gm · Published 30/09/2022 · updated 17/06/2026

In breve

CVE-2022-2922 è una vulnerabilità MEDIO (CVSS 4.9) che riguarda DotNetNuke.Core, DotNetNuke.Web, dotnetnuke (dnnsoftware).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.3% delle vulnerabilità.
Correzione: aggiornare a 9.11.0 o successiva.

Package	Affected versions	Patched versions
DotNetNuke.Core NuGet	`< 9.11.0`	`9.11.0`
DotNetNuke.Web NuGet	`< 9.11.0`	`9.11.0`
dotnetnuke dnnsoftware	`< 9.11.0`	`9.11.0`

Description

DNN (GitHub repository dnnsoftware/dnn.platform) prior to 9.11.0 is vulnerable to Relative Path Traversal. Version 9.11.0 contains a patch for this issue.

NVD description

Relative Path Traversal in GitHub repository dnnsoftware/dnn.platform prior to 9.11.0.

References

nvd.nist.gov/vuln/detail/CVE-2022-2922 · ADVISORY
dnnsoftware/Dnn.Platform commit 3697c53 · WEB
dnnsoftware/dnn.platform commit 9b17351 · WEB
dnnsoftware/dnn.platform · PACKAGE
huntr.dev/bounties/74918f40-dc11-4218-abef-064eb71a0703 · WEB

Altre vulnerabilità di DotNetNuke.Core

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

DotNetNuke.Core

NuGet

< 9.11.0

9.11.0

DotNetNuke.Web

NuGet

< 9.11.0

9.11.0

dotnetnuke

dnnsoftware

< 9.11.0

9.11.0

Altre vulnerabilità di DotNetNuke.Core

Vedi tutto →