CVE-2018-18325
DD
DotNetNuke (DNN) DotNetNuke (DNN)
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
What it is
DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters. This CVE ID resolves an incomplete patch for CVE-2018-15811.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.