Security Advisory
CVE-2019-19392
9.8
CRITICAL
Vulnerability Description
The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.
Published Date
January 21, 2020
Official Source
NIST NVD Advisory