Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2025-48376

Dnn.Platform's Site Import could use an external source with a crafted request

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Version 9.13.9 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

dnnsoftware Dnn.Platform

  • < 9.13.9affected

References