CVE-2020-5187: Path Traversal
Published Feb 24, 2020
·Updated
DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversal (issue 2 of 2).
Affected Software
1 affected component
dnnsoftware Dotnetnuke<=9.4.4
Event History
Feb 24, 2020
CVE Published
via MITRE·02:22 PM
Data Sourced
via MITRE·02:22 PM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-5187?
CVE-2020-5187 has been rated as medium severity due to its potential impact on the security of DNN applications.
2
How do I fix CVE-2020-5187?
To mitigate CVE-2020-5187, upgrade to DNN version 9.4.5 or later where the path traversal vulnerability is patched.
3
What types of systems are affected by CVE-2020-5187?
CVE-2020-5187 affects DNN platforms up to version 9.4.4.
4
What does CVE-2020-5187 exploit?
CVE-2020-5187 exploits a path traversal vulnerability that allows unauthorized file access on the DNN platform.
5
Can CVE-2020-5187 be exploited remotely?
Yes, CVE-2020-5187 can be exploited remotely by an attacker to gain access to sensitive files.