PT-2020-18290 · Dnn · Dnn

Published 2020-02-24 · Updated 2022-05-24 · CVE-2020-5187

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DNN (formerly DotNetNuke) versions 9.4.4 and earlier

Description The issue allows Path Traversal via unsafe handling of zip files. This means that an attacker could potentially access files outside the intended directory structure by manipulating the zip file handling mechanism.

Recommendations For versions 9.4.4 and earlier, consider restricting access to zip file handling functionality until a patch is available. As a temporary workaround, avoid using the zip file handling feature in DNN (formerly DotNetNuke) to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-5187

GHSA-4QF5-7XC2-WQPG

Affected Products

Dnn

References · 8

• 🔥 http://packetstormsecurity.com/files/156489/DotNetNuke-CMS-9.4.4-Zip-Directory-Traversal.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-5187 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5187 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4qf5-7xc2-wqpg · Vendor Advisory
• https://github.com/dnnsoftware/Dnn.Platform/releases · Note
• https://medium.com/@SajjadPourali/dnn-dotnetnuke-cms-not-as-secure-as-you-think-e8516f789175 · Note
• https://t.me/cvenotify/1172 · Telegram Post
• https://medium.com/%40SajjadPourali/dnn-dotnetnuke-cms-not-as-secure-as-you-think-e8516f789175 · Note