CVE-2020-5188

Name of the Vulnerable Software and Affected Versions DNN (formerly DotNetNuke) versions through 9.4.4

Description The issue concerns insecure permissions and a file upload vulnerability via bypassing client-side file extension checks.

Recommendations For versions through 9.4.4, update to a version that addresses the insecure permissions and file upload vulnerability issues. As a temporary workaround, consider restricting file uploads to minimize the risk of exploitation. Avoid using the file upload feature until the issue is resolved.