~ / search / GHSA-pf46-gqg9-j3v3

GHSA-pf46-gqg9-j3v3

Insufficient Entropy in DotNetNuke

Source: GitHub Advisory Database (reviewed) High CVE-2018-15812

Packages

EcosystemPackageAffectedFixed in
NuGet DotNetNuke.Core >= 9.2.0, < 9.2.2 9.2.2

Details

As written in the advisory (Markdown source, shown as plain text).

DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.

References

External links from the advisory. They lead to third-party sites.