CVE-2017-0929

DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class

published July 3, 2018

CVSS
—
EPSS
13%
Percentile
96.2
In the wild
Unconfirmed
What it is

DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12543 · 96.2th percentile
Published
2018-07-03T21:00Z
EPSS history
Timeline
  • 03 JUL 21:00Z
    DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class
    cvelistv5