MEDIUM4.0

GHSA-mj48-f959-pqph

DotNetNuke (DNN) Open redirect vulnerability

Quick fix

GHSA-mj48-f959-pqph — DotNetNuke.Core: upgrade to the fixed version with the command below.

dotnet add package DotNetNuke.Core --version 6.2.9

Details

Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Are you affected?

Enter the version of the package you're using.

Affected packages

NuGet/DotNetNuke.Core

Introduced in: 0Fixed in: 6.2.9

Fixdotnet add package DotNetNuke.Core --version 6.2.9

NuGet/DotNetNuke.Core

Introduced in: 7.0Fixed in: 7.1.1

Fixdotnet add package DotNetNuke.Core --version 7.1.1

References

https://nvd.nist.gov/vuln/detail/CVE-2013-7335[ADVISORY]
https://github.com/dnnsoftware/Dnn.Platform[PACKAGE]
http://www.dnnsoftware.com/platform/manage/security-center[WEB]
http://www.securityfocus.com/bid/61809[WEB]