CVE-2025-48376 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a malicious SuperUser (Ho…
Low CVSS: 3.5

CVE-2025-48376

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Version 9.13.9 fixes the issue.
Vendor
Dnnsoftware
Product
Dotnetnuke
CWE
CWE-841
Yayın Tarihi
2025-05-23 16:15:27
Güncelleme
2025-08-26 14:25:37
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-841 Dotnetnuke LOW Dnnsoftware 2025

Referanslar

https://github.com/dnnsoftware/Dnn.Platform/commit/13fb13ee76173c3467d7ee8d120b20ca7bd4fa63 https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-62mf-vhhw-xmf8