CVE-2020-5188

Medium

DNN (formerly DotNetNuke) through 9.4.4 has Insecure Permissions.

mitre·CWE-434·Published 2020-02-24

CVSS

6.5

EPSS

0.02

KEV

Exploits

cve.orgen

65 chars

DNN (formerly DotNetNuke) through 9.4.4 has Insecure Permissions.

NVDen

65 chars

DNN (formerly DotNetNuke) through 9.4.4 has Insecure Permissions.

OSV.deven

118 chars

DNN (formerly DotNetNuke) through 9.4.4 has a File upload vulnerability via bypassing client-side file extension check

GHSAen

118 chars

DNN (formerly DotNetNuke) through 9.4.4 has a File upload vulnerability via bypassing client-side file extension check

NVDes

83 chars

DNN (anteriormente DotNetNuke) versiones hasta 9.4.4, presenta Permisos No Seguros.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.0	8.0	2.9	AV:N/AC:L/Au:S/C:N/I:P/A:N
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N