← Back to browse · API

CVE-2025-52488

Severity
HIGH
CVSS
8.6
EPSS
0.31975
Risk score
45.59
CISA KEV
No
PoC
No
Published
2025-06-21
Modified
2025-06-23
First seen
2026-08-07
Aliases
EUVD-2025-18800, GHSA-MGFV-2362-JQ96
Products
DNNSoftware:Dnn.Platform 6.0.0, < 10.0.1
Sources
euvd EUVD-2025-18800

Description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been patched in version 10.0.1.

References