dnnsoftware/dnn.platform · Security
High severity vulnerability that affects DotNetNuke.Core
- GHSA ID
- GHSA-g8j6-m4p7-5rfq
- CVE ID
- CVE-2017-0929
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v3
- 7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources.
CWEs
- CWE-918 · Server-Side Request Forgery (SSRF)