GHSA-mj48-f959-pqph

Source

https://github.com/advisories/GHSA-mj48-f959-pqph

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-mj48-f959-pqph/GHSA-mj48-f959-pqph.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-mj48-f959-pqph

Aliases

CVE-2013-7335

Published

2022-05-17T04:49:44Z

Modified

2024-02-16T08:14:27.942200Z

Severity

4.0 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N CVSS Calculator

Summary

DotNetNuke (DNN) Open redirect vulnerability

Details

Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Database specific

{
    "severity": "MODERATE",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-20",
        "CWE-601"
    ],
    "nvd_published_at": "2014-03-12T14:55:00Z",
    "github_reviewed_at": "2023-08-29T18:14:44Z"
}

References

Affected packages

NuGet / DotNetNuke.Core

Package

Name: DotNetNuke.Core; View open source insights on deps.dev
Purl: pkg:nuget/DotNetNuke.Core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.2.9

Affected versions

6.*

6.0.0

NuGet / DotNetNuke.Core

Package

Name: DotNetNuke.Core; View open source insights on deps.dev
Purl: pkg:nuget/DotNetNuke.Core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

7.0

Fixed

7.1.1

Affected versions

7.*

7.0.0

7.0.6.121

7.1.0