PT-2023-15146 · Dnn · Dotnetnuke
CVE-2022-47053
·
Publicado
2023-04-12
·
Atualizado
2023-04-19
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
DNN Corp DotNetNuke versions 7.0.0 through 9.10.2
Description
An arbitrary file upload vulnerability in the Digital Assets Manager module allows attackers to execute arbitrary code via a crafted SVG file.
Recommendations
For versions 7.0.0 through 9.10.2, update to a version that fixes the arbitrary file upload vulnerability in the Digital Assets Manager module to prevent execution of arbitrary code via crafted SVG files.
As a temporary workaround, consider disabling the Digital Assets Manager module until a patch is available.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dotnetnuke