CVE-2025-52488CWE-200

DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input

High · published June 21, 2025

CVSS v3.1
8.6
EPSS
36%
Percentile
98.5
In the wild
Unconfirmed
What it is

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been patched in version 10.0.1.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.35761 · 98.5th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-06-21T02:51Z
EPSS history
Timeline
  • 21 JUN 02:51Z
    DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input
    cvelistv5