CVE-2025-48376
Dnn.Platform's Site Import could use an external source with a crafted request
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Dnn.Platform's Site Import could use an external source with a crafted request
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Version 9.13.9 fixes the issue.
Reserved 2025-05-19 | Published 2025-05-23 | Updated 2025-05-23 | Assigner GitHub_MCWE-841: Improper Enforcement of Behavioral Workflow
github.com/...atform/security/advisories/GHSA-62mf-vhhw-xmf8
github.com/...ommit/13fb13ee76173c3467d7ee8d120b20ca7bd4fa63
Support options
