Published: May 19, 2009

Version: 1.0

Maximum Severity Rating: Low

Background

DotNetNuke has a custom errorpage for handling displaying information to users.

Issue Summary

The errorpage contains details of the current running version. This information could be useful to hackers attempting to profile an application. 

Mitigating factors

N/a

Affected DotNetNuke versions

• 4.0 - 4.9.3

Non-Affected Versions:

• All other versions

Fix(s) for issue

To fix this problem, you are recommended to update to the latest version of DotNetNuke (4.9.4 at time of writing)

Acknowledgments

N/A

Security Policy

Click here to read more details on the DotNetnuke Security Policy