{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"9.4.4"}],"component":"DotNetNuke.Core","cve_ids":["CVE-2020-5188"],"ecosystem":"NuGet","epss":0.01851,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vjcm-j85r-7p68","id":"tcs_01M5N928QJ5NZ02VW7WHW8NE1V","modified_at":"2024-02-16T08:08:54.107106Z","published_at":"2022-05-24T17:09:34Z","references":["https://osv.dev/vulnerability/GHSA-vjcm-j85r-7p68","https://nvd.nist.gov/vuln/detail/CVE-2020-5188","https://github.com/dnnsoftware/Dnn.Platform","https://github.com/dnnsoftware/Dnn.Platform/releases","https://medium.com/@SajjadPourali/dnn-dotnetnuke-cms-not-as-secure-as-you-think-e8516f789175","http://packetstormsecurity.com/files/156484/DotNetNuke-CMS-9.5.0-File-Extension-Check-Bypass.html"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-vjcm-j85r-7p68","url":"https://osv.dev/vulnerability/GHSA-vjcm-j85r-7p68"}],"summary":"DNN File Upload Vulnerability"}