DNN site Import could use an external source with a crafted request

GHSA-62mf-vhhw-xmf8 · CVE-2025-48376

Published May 23, 2025 · Modified May 23, 2025

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported.

References

WEB https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-62mf-vhhw-xmf8
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-48376
WEB https://github.com/dnnsoftware/Dnn.Platform/commit/13fb13ee76173c3467d7ee8d120b20ca7bd4fa63
PACKAGE https://github.com/dnnsoftware/Dnn.Platform

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes

DNN site Import could use an external source with a crafted request

Description

References

More NuGet vulnerabilities

Start Securing