GitHub Advisoryadvisory · NuGet

GHSA-62mf-vhhw-xmf8 DNN site Import could use an external source with a crafted request

LOW Published 2025-05-23 Modified 2025-05-23 Official page ↗

Aliases: CVE-2025-48376
Ecosystem: NuGet
Packages: DotNetNuke.SiteExportImport
Severity: Low
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L
Weaknesses: CWE-841
Reviewed: 2025-05-23

Affected packages

• NuGet DotNetNuke.SiteExportImport: < 9.13.9 → fixed in 9.13.9

Description

A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported.

Related

Alias · CVE (1)

CVE-2025-48376 DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. vulnerability

Weakness · CWE (1)

CWE-841 Improper Enforcement of Behavioral Workflow weakness

References