{"id":"CVE-2013-7335","published":"2014-03-12T14:00:00Z","modified":"2024-09-16T20:07:52Z","title":"Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect…","vendor":null,"product":null,"tier":"tail","description":{"text":"Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01168,"percentile":0.67246,"provenance":"source"},"cwes":[],"references":[{"url":"http://secunia.com/advisories/53493","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/bid/61809","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.dnnsoftware.com/platform/manage/security-center","tags":["x_refsource_CONFIRM"]}],"priority":{"score":13.4,"factors":[{"name":"EPSS percentile","points":13.45}]},"affected":[{"ecosystem":"NuGet","package":"DotNetNuke.Core","vulnerableRanges":["<6.2.9",">=7.0, <7.1.1"],"patched":["6.2.9","7.1.1"],"from":["GHSA-mj48-f959-pqph"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-4574","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2007-0660","published":"2007-02-01","fixed":"03.02.01","kev":false},{"cve":"CVE-2008-6540","published":"2009-03-30","fixed":"4.8.2","kev":false},{"cve":"CVE-2013-4649","published":"2014-03-12","fixed":"7.1.1","kev":false},{"cve":"CVE-2013-7335","published":"2014-03-12","fixed":"7.1.1","kev":false},{"cve":"CVE-2015-1566","published":"2015-02-09","fixed":"7.4.0","kev":false,"link":{"from":"CVE-2013-7335","to":"CVE-2015-1566","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"NuGet:DotNetNuke.Core","fromFixed":"7.1.1","toFixed":"7.4.0","daysApart":334}]}},{"cve":"CVE-2015-2794","published":"2017-02-06","fixed":"7.4.1","kev":false},{"cve":"CVE-2016-7119","published":"2016-08-31","fixed":"8.0.1","kev":false}],"package":"NuGet:DotNetNuke.Core"}}