{"action":"Upgrade DotNetNuke.Core to 9.1.1 or later.","affected":[{"fixed":"9.1.1","introduced":"0"}],"component":"DotNetNuke.Core","cve_ids":["CVE-2017-9822"],"ecosystem":"NuGet","epss":0.94789,"exploited":true,"fixed_versions":["9.1.1"],"ghsa_id":"GHSA-x2rg-fmcv-crq5","id":"tcs_01M5N94KN2Z8YA7Y6CNBS9TBWW","modified_at":"2023-11-08T03:59:29.986789Z","published_at":"2018-10-16T19:34:22Z","references":["https://osv.dev/vulnerability/GHSA-x2rg-fmcv-crq5","https://nvd.nist.gov/vuln/detail/CVE-2017-9822","https://github.com/advisories/GHSA-x2rg-fmcv-crq5","http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html","http://www.dnnsoftware.com/community/security/security-center","http://www.securityfocus.com/bid/102213"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-x2rg-fmcv-crq5","url":"https://osv.dev/vulnerability/GHSA-x2rg-fmcv-crq5"},{"source":"kev","source_id":"CVE-2017-9822","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"DNN (aka DotNetNuke) has Remote Code Execution via a cookie"}