{"action":"Upgrade DotNetNuke.Web to 9.11.0 or later.","affected":[{"fixed":"9.11.0","introduced":"0"}],"component":"DotNetNuke.Web","cve_ids":["CVE-2022-2922"],"ecosystem":"NuGet","epss":0.01292,"exploited":false,"fixed_versions":["9.11.0"],"ghsa_id":"GHSA-9w72-2f23-57gm","id":"tcs_01M5N8HK6A6Q1H5VHN4MT7S54J","modified_at":"2023-11-08T04:09:11.122967Z","published_at":"2022-10-01T00:00:25Z","references":["https://osv.dev/vulnerability/GHSA-9w72-2f23-57gm","https://nvd.nist.gov/vuln/detail/CVE-2022-2922","https://github.com/dnnsoftware/Dnn.Platform/commit/3697c5344cef8d49214230f0cc2efcd9e93a00a8","https://github.com/dnnsoftware/dnn.platform/commit/9b17351592fbde376506ba6705dbcc7a74a2a195","https://github.com/dnnsoftware/dnn.platform","https://huntr.dev/bounties/74918f40-dc11-4218-abef-064eb71a0703"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-9w72-2f23-57gm#NuGet/DotNetNuke.Web","url":"https://osv.dev/vulnerability/GHSA-9w72-2f23-57gm"}],"summary":"DNN vulnerable to Relative Path Traversal"}