CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-07-03
DotNetNuke (DNN) Remote Code Execution via Weak Encryption and Cookie Deserialization (CVE-2018-15811)
[Affected Scope] DotNetNuke (DNN) Platform versions 9.2.0 through 9.2.1
[Impact] Attackers can exploit weak cryptographic algorithms to decrypt, forge, and inject malicious serialized .NET payloads into cookies, leading to Remote Code Execution (RCE)
[Mitigation] Immediately upgrade DNN Platform to version 9.2.2 or higher, and regenerate the MachineKey in web.config