DotNetNuke.SiteExportImport
DNN (formerly DotNetNuke) is the leading open source web content management platform (CMS) in the Microsoft ecosystem.
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 57
- Cadence
- ~39 days
- Last 12 months
- 15
Reach
- Stars
- 1.1k
Details
- License
- MIT
- First release
- Jul 05, 2017
| Version | Released | |
|---|---|---|
10.3.3
patch
| ||
10.3.3-rc.1
pre
| ||
10.3.2
patch
| ||
10.3.2-rc.1
pre
| ||
10.3.1
patch
| ||
10.3.1-rc.1
pre
| ||
10.3.0
minor
| ||
10.3.0-rc.2
pre
| ||
10.2.4-bulk-install-packaging.1+335
pre
| ||
10.2.4-bulk-install.1+329
pre
| ||
10.2.3
patch
| ||
10.2.2
patch
| ||
10.2.1
patch
| ||
10.2.0
minor
| ||
10.1.2
patch
| ||
10.1.1
patch
| ||
10.1.0
minor
| ||
10.0.1
patch
| ||
9.13.9
patch
| ||
10.0.0
major
| ||
10.0.0-rc.2
pre
| ||
9.13.8
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.13.7
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.13.6
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.13.5
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.13.5-ci0062
pre
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.13.4
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.13.3
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.13.2
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.13.1
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.13.0
minor
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.12.0
minor
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.11.2
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.11.1
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.11.0
minor
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.10.2
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.10.1
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.10.0
minor
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.9.1
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.9.0
minor
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.7.2
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.8.0
minor
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.7.1
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.7.0
minor
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.6.2
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.6.1
minor
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.5.0
minor
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.4.4
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.4.3
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev | ||
9.4.2
patch
1 CVE
CVE-2025-48376
GHSA-62mf-vhhw-xmf8
May 23, 2025
DNN site Import could use an external source with a crafted request
3.5
/ 10
Low
Network
Low
High
Required
Unchanged
None
Low
Low
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Affected versions
9.1.1.129
9.10.0
9.10.1
9.10.2
9.11.0
9.11.1
9.11.2
9.12.0
9.13.0
9.13.0-ci0000
9.13.1
9.13.2
+ 25 more Show less
9.13.3
9.13.4
9.13.5
9.13.5-ci0062
9.13.6
9.13.7
9.13.8
9.2.1.533
9.3.0
9.3.1
9.3.2
9.4.0
9.4.1
9.4.2
9.4.3
9.4.4
9.5.0
9.6.1
9.6.2
9.7.0
9.7.1
9.7.2
9.8.0
9.9.0
9.9.1
Fixed in
9.13.9
References Updated May 23, 2025 · Source: OSV.dev |