GitHub Advisoryadvisory · NuGet

GHSA-mj48-f959-pqph DotNetNuke (DNN) Open redirect vulnerability

MEDIUM Published 2022-05-17 Modified 2023-08-29 Official page ↗
Aliases
CVE-2013-7335
Ecosystem
NuGet
Packages
DotNetNuke.Core
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Weaknesses
CWE-20, CWE-601
Reviewed
2023-08-29

Affected packages

• NuGet DotNetNuke.Core: < 6.2.9 → fixed in 6.2.9 • NuGet DotNetNuke.Core: >= 7.0, < 7.1.1 → fixed in 7.1.1

Description

Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2013-7335 Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary… vulnerability

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-601 URL Redirection to Untrusted Site weakness

References