CVE-2025-52488 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM a…
High CVSS: 8.6

CVE-2025-52488

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been patched in version 10.0.1.
Vendor
Dnnsoftware
Product
Dotnetnuke
CWE
CWE-200
Yayın Tarihi
2025-06-21 03:15:24
Güncelleme
2025-09-15 15:21:56
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

Referanslar