Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-40305

DNN has Force Friend Request Acceptance

Description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 6.0.0 and prior to version 10.2.2, in the friends feature, a user could craft a request that would force the acceptance of a friend request on another user. Version 10.2.2 patches the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

dnnsoftware Dnn.Platform

  • >= 6.0.0, < 10.2.2affected

References