GHSA-62mf-vhhw-xmf8
DNN site Import could use an external source with a crafted request
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| NuGet | DotNetNuke.SiteExportImport | < 9.13.9 | 9.13.9 |
Details
As written in the advisory (Markdown source, shown as plain text).
A malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported.
References
External links from the advisory. They lead to third-party sites.