DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a…
GitHub_M·CWE-841·Published 2025-05-23
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Version 9.13.9 fixes the issue.
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Version 9.13.9 fixes the issue.
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported.
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported.
DNN (anteriormente DotNetNuke) es una plataforma de gestión de contenido web (CMS) de código abierto del ecosistema de Microsoft. Antes de la versión 9.13.9, un superusuario (host) malicioso podía manipular una solicitud para usar una URL externa para la exportación de un sitio web y su posterior importación. La versión 9.13.9 soluciona este problema.
| Version | Type | Source | Base | Exp | Impact | Vector |
|---|---|---|---|---|---|---|
| 3.1 | Primary | cve.org | 3.5 | — | — | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L |
| 3.1 | Primary | cve.org | 3.5 | — | — | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L |
| 3.1 | Primary | NVD | 2.4 | 0.9 | 1.4 | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N |
| 3.1 | Secondary | GHSA | 3.5 | — | — | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L |
| 3.1 | Secondary | NVD | 3.5 | 0.9 | 2.5 | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L |