CVE-2021-31858 (Medium) detected in dotnetnuke.core.9.7.0.nupkg, dotnetnuke.core.9.2.1.533.nupkg #18
Labels
Mend: dependency security vulnerability
Security vulnerability detected by WhiteSource
CVE-2021-31858 - Medium Severity Vulnerability
dotnetnuke.core.9.7.0.nupkg
Provides basic references to the DotNetNuke.dll to develop extensions for the DNN Platform. For MVC or WebAPI please see other packages available as well
Library home page: https://api.nuget.org/packages/dotnetnuke.core.9.7.0.nupkg
Path to dependency file: /Libraries/UpendoProvidersFipsAesCryptoProvider/Upendo.Libraries.UpendoProvidersFipsAesCryptoProvider.csproj
Path to vulnerable library: /home/wss-scanner/.nuget/packages/dotnetnuke.core/9.7.0/dotnetnuke.core.9.7.0.nupkg,/netnuke.core/9.7.0/dotnetnuke.core.9.7.0.nupkg
Dependency Hierarchy:
dotnetnuke.core.9.2.1.533.nupkg
DNN Platform is an open source web application framework. This package contains only the core DNN Platform library.
Library home page: https://api.nuget.org/packages/dotnetnuke.core.9.2.1.533.nupkg
Path to dependency file: /Libraries/UpendoProvidersFipsAesCryptoProvider/Upendo.Libraries.UpendoProvidersFipsAesCryptoProvider.csproj
Path to vulnerable library: /netnuke.core/9.2.1.533/dotnetnuke.core.9.2.1.533.nupkg
Dependency Hierarchy:
Found in base branch: development
DotNetNuke (DNN) 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject arbitrary code via a crafted payload.
Publish Date: 2022-07-20
URL: CVE-2021-31858
Base Score Metrics:
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2021-31858
Release Date: 2022-07-20
Fix Resolution: DotNetNuke.Core - 9.11.0
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: