CVE-2025-52488: DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input

June 20, 2025 (updated June 27, 2025)

DNN.PLATFORM allows a specially crafted series of malicious interaction can expose NTLM hashes to a third party SMB server. This vulnerability is fixed in 10.0.1.

References

github.com/advisories/GHSA-mgfv-2362-jq96
github.com/dnnsoftware/Dnn.Platform
github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-mgfv-2362-jq96
nvd.nist.gov/vuln/detail/CVE-2025-52488

Code Behaviors & Features

Detect and mitigate CVE-2025-52488 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →