GitHub Advisoryadvisory · NuGet

GHSA-fjhg-3mrh-mm7h DNN.PLATFORM possibly allows bypass of IP Filters

HIGH Published 2025-06-20 Modified 2025-06-27 Official page ↗
Aliases
CVE-2025-52487
Ecosystem
NuGet
Packages
DNN.PLATFORM
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
Weaknesses
CWE-863
Reviewed
2025-06-20

Affected packages

• NuGet DNN.PLATFORM: >= 7.0.0, < 10.0.1 → fixed in 10.0.1

Description

DNN.PLATFORM allows a specially crafted request or proxy to be created that would bypass the design of DNN Login IP Filters allowing login attempts from IP Adresses not in the allow list. This vulnerability is fixed in 10.0.1.

Related

Alias · CVE (1)

  • CVE-2025-52487 DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References