Launch Week Day 1: Announcing Security Design Review
HIGH 7.5 NuGet

Insufficient Entropy in DotNetNuke

GHSA-pf46-gqg9-j3v3 · CVE-2018-15812

Published · Modified

Description

DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.

Ready to move

Start Securing

Free, no credit card | First findings in minutes