CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-07-20
DotNetNuke (DNN) Cookie Deserialization Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2017-9822)
[Affected Scope] All DotNetNuke (DNN) web application servers running versions prior to 9.1.1
[Impact] Attackers can exploit this vulnerability to deserialize arbitrary .NET objects via manipulated cookies, leading to Remote Code Execution (RCE) under the context of the web server
[Mitigation] Immediately upgrade the DNN platform to the latest stable version (9.1.1 or higher) and implement WAF rules to block malicious cookie payloads