HIGH

GHSA-fjhg-3mrh-mm7h

DNN.PLATFORM possibly allows bypass of IP Filters

Quick fix

GHSA-fjhg-3mrh-mm7h — DNN.PLATFORM: upgrade to the fixed version with the command below.

dotnet add package DNN.PLATFORM --version 10.0.1

Details

DNN.PLATFORM allows a specially crafted request or proxy to be created that would bypass the design of DNN Login IP Filters allowing login attempts from IP Adresses not in the allow list. This vulnerability is fixed in 10.0.1.

Are you affected?

Enter the version of the package you're using.

Affected packages

NuGet/DNN.PLATFORM

Introduced in: 7.0.0Fixed in: 10.0.1

Fixdotnet add package DNN.PLATFORM --version 10.0.1

References

https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-fjhg-3mrh-mm7h[WEB]
https://nvd.nist.gov/vuln/detail/CVE-2025-52487[ADVISORY]
https://github.com/dnnsoftware/Dnn.Platform[PACKAGE]