critical9.8
CVE-2019-19392
The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator priv…
Impact
The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fordnn | Usersexportimport | before 1.2.0 |