Description
The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.
Unscored
CVE-2019-19392
EUVD-2019-9013GHSA-62qm-m6wg-jvqw
The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users wit…
Published Jan 21, 2020 · Updated Aug 5, 2024 · Assigned by mitre