GHSA-mj48-f959-pqphMediumCVSS 4.0

DotNetNuke (DNN) Open redirect vulnerability

Published
May 17, 2022
Last Modified
August 29, 2023

🔗 CVE IDs covered (1)

📋 Description

Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

🎯 Affected products2

  • nuget/DotNetNuke.Core:< 6.2.9
  • nuget/DotNetNuke.Core:>= 7.0, < 7.1.1

🔗 References (4)