CVE

CVE-2017-9822

P1⬤ KNOWN RANSOMWARE USE

DotNetNuke (DNN) Remote Code Execution Vulnerability

DotNetNuke (DNN) · DotNetNuke (DNN)

Date added (CISA)

2021-11-03

Remediation due

2022-05-03

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization.