CVE-2017-9822

8.8HIGH

DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."

게시됨: 7/20/2017업데이트됨: 10/22/2025

CISA 알려진 악용 취약점

DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization.

필요한 조치:

Apply updates per vendor instructions.

마감일:

2022-05-03

알려진 랜섬웨어 사용

설명

DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."

AI 분석AI 기반

영향받는 제품

dnnsoftwaredotnetnuke

사용 가능한 익스플로잇 (1)

참조