CVE-2025-48376: DNN site Import could use an external source with a crafted request

May 23, 2025

A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported.

References

github.com/advisories/GHSA-62mf-vhhw-xmf8
github.com/dnnsoftware/Dnn.Platform
github.com/dnnsoftware/Dnn.Platform/commit/13fb13ee76173c3467d7ee8d120b20ca7bd4fa63
github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-62mf-vhhw-xmf8
nvd.nist.gov/vuln/detail/CVE-2025-48376

Code Behaviors & Features

Detect and mitigate CVE-2025-48376 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →