PT-2020-18291
CVE-2020-5188
·
تاريخ النشر
2020-02-24
·
تاريخ التحديث
2022-05-24
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
DNN (formerly DotNetNuke) versions through 9.4.4
Description
The issue concerns insecure permissions and a file upload vulnerability via bypassing client-side file extension checks.
Recommendations
For versions through 9.4.4, update to a version that addresses the insecure permissions and file upload vulnerability issues.
As a temporary workaround, consider restricting file uploads to minimize the risk of exploitation.
Avoid using the file upload feature until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾