ByteOS Network

NVD Vulnerability Details :

CVE-2025-48376

Analyzed

Source-security-advisories@github.com

Published At-23 May, 2025 | 16:15

Updated At-26 Aug, 2025 | 14:25

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Version 9.13.9 fixes the issue.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	3.5	LOW	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L
Primary	3.1	2.4	LOW	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CPE Matches

ESW Operations, LLC ("DNN Software")

>>dotnetnuke>>Versions before 9.13.9(exclusive)

cpe:2.3:a:dnnsoftware:dotnetnuke:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-841	Primary	security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/dnnsoftware/Dnn.Platform/commit/13fb13ee76173c3467d7ee8d120b20ca7bd4fa63	security-advisories@github.com	Patch
https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-62mf-vhhw-xmf8	security-advisories@github.com	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History