{"id":"CVE-2022-2922","published":"2022-09-30T06:45:13Z","modified":"2025-05-20T16:03:33Z","title":"Relative Path Traversal in dnnsoftware/dnn.platform","vendor":"dnnsoftware","product":"dnnsoftware/dnn.platform","tier":"tail","description":{"text":"Relative Path Traversal in GitHub repository dnnsoftware/dnn.platform prior to 9.11.0.","provenance":"source","from":"CVE.org"},"cvss":{"score":4.9,"severity":"MEDIUM","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01292,"percentile":0.7018,"provenance":"source"},"cwes":[{"id":"CWE-23","name":"Relative Path Traversal"}],"references":[{"url":"https://huntr.dev/bounties/74918f40-dc11-4218-abef-064eb71a0703","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/dnnsoftware/dnn.platform/commit/9b17351592fbde376506ba6705dbcc7a74a2a195","tags":["x_refsource_MISC"]}],"priority":{"score":17.5,"factors":[{"name":"EPSS percentile","points":14.04},{"name":"CVSS severity","points":3.43}]},"vendorSlug":"dnnsoftware","affectedVersions":[{"vendor":"dnnsoftware","product":"dnnsoftware/dnn.platform","versions":[">= unspecified, < 9.11.0"]}],"affected":[{"ecosystem":"NuGet","package":"DotNetNuke.Core","vulnerableRanges":["<9.11.0"],"patched":["9.11.0"],"from":["GHSA-9w72-2f23-57gm"],"provenance":"source"},{"ecosystem":"NuGet","package":"DotNetNuke.Web","vulnerableRanges":["<9.11.0"],"patched":["9.11.0"],"from":["GHSA-9w72-2f23-57gm"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-7070","exploited":false,"provenance":"source"}}