{"id":"CVE-2020-5187","published":"2020-02-24T14:22:46Z","modified":"2024-08-04T08:22:09Z","title":"DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversal (issue 2 of 2)","vendor":null,"product":null,"tier":"tail","description":{"text":"DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversal (issue 2 of 2).","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.02394,"percentile":0.83926,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/dnnsoftware/Dnn.Platform/releases","tags":["x_refsource_MISC"]},{"url":"http://packetstormsecurity.com/files/156489/DotNetNuke-CMS-9.4.4-Zip-Directory-Traversal.html","tags":["x_refsource_MISC"]},{"url":"https://medium.com/%40SajjadPourali/dnn-dotnetnuke-cms-not-as-secure-as-you-think-e8516f789175","tags":["x_refsource_MISC"]}],"priority":{"score":21.8,"factors":[{"name":"EPSS percentile","points":16.79},{"name":"Public exploit code","points":5.0}]},"affected":[{"ecosystem":"NuGet","package":"DotNetNuke.Core","vulnerableRanges":["<9.5.0"],"patched":["9.5.0"],"from":["GHSA-4qf5-7xc2-wqpg"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2427","exploited":false,"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/156489/DotNetNuke-CMS-9.4.4-Zip-Directory-Traversal.html"],"lineage":{"packageHistory":[{"cve":"CVE-2018-18325","published":"2019-07-03","fixed":"9.3.0","kev":true},{"cve":"CVE-2018-18326","published":"2019-07-03","fixed":"9.3.0","kev":false},{"cve":"CVE-2019-12562","published":"2019-09-26","fixed":"9.4.0","kev":false,"link":{"from":"CVE-2019-12562","to":"CVE-2020-5187","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"NuGet:DotNetNuke.Core","fromFixed":"9.4.0","toFixed":"9.5.0","daysApart":151}]}},{"cve":"CVE-2020-5187","published":"2020-02-24","fixed":"9.5.0","kev":false},{"cve":"CVE-2022-2922","published":"2022-09-30","fixed":"9.11.0","kev":false},{"cve":"CVE-2025-32372","published":"2025-04-09","fixed":"9.13.8","kev":false},{"cve":"CVE-2025-48377","published":"2025-05-23","fixed":"9.13.9","kev":false}],"package":"NuGet:DotNetNuke.Core"}}