cve/2025/CVE-2025-52488.md
2025-09-29 21:09:30 +02:00

997 B

CVE-2025-52488

Description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been patched in version 10.0.1.

POC

Reference

No PoCs from references.

Github