What is GHSA-9w72-2f23-57gm?

GHSA-9w72-2f23-57gm is a security advisory published by GitHub Security Advisories with Medium severity. DNN vulnerable to Relative Path Traversal

Which CVE IDs does GHSA-9w72-2f23-57gm cover?

GHSA-9w72-2f23-57gm covers the following CVE IDs: CVE-2022-2922. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9w72-2f23-57gm?

GHSA-9w72-2f23-57gm has a CVSS v3 base score of 4.9, published by GitHub Security Advisories.

Which products are affected by GHSA-9w72-2f23-57gm?

GHSA-9w72-2f23-57gm affects 2 products, including: nuget/DotNetNuke.Core:\u003c 9.11.0; nuget/DotNetNuke.Web:\u003c 9.11.0.

GHSA-9w72-2f23-57gmMediumCVSS 4.9

DNN vulnerable to Relative Path Traversal

Vendor

GitHub Security Advisories

Published

October 1, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-2922 →

📋 Description

DNN (GitHub repository dnnsoftware/dnn.platform) prior to 9.11.0 is vulnerable to Relative Path Traversal. Version 9.11.0 contains a patch for this issue.

🎯 Affected products2

nuget/DotNetNuke.Core:< 9.11.0
nuget/DotNetNuke.Web:< 9.11.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-2922
https://github.com/dnnsoftware/dnn.platform/commit/9b17351592fbde376506ba6705dbcc7a74a2a195
https://huntr.dev/bounties/74918f40-dc11-4218-abef-064eb71a0703
https://github.com/dnnsoftware/Dnn.Platform/commit/3697c5344cef8d49214230f0cc2efcd9e93a00a8
https://github.com/advisories/GHSA-9w72-2f23-57gm