CVE-2019-19392

2020-01-2116:34:07

mitre

www.cve.org

9.4 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%

JSON

The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles=“Administrators” in XML or CSV data.

References

blog.joaoorvalho.com/description-cve-2019-19392/

github.com/fordnn/usersexportimport/commits/master