CVE-2025-52487: DNN.PLATFORM Bypass of IP Filters Vulnerability
Summary
CVE-2025-52487: DNN.PLATFORM possibly allows bypass of IP Filters. Affects DNN.PLATFORM versions >= 7.0.0, < 10.0.1. Fixed in 10.0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
DNN.PLATFORM is a widely used open-source web content management system that enables users to create and manage websites easily. It offers features such as user authentication, customizable templates, and a robust plugin architecture. However, it is susceptible to vulnerabilities that can compromise its security, such as the one described here, which allows unauthorized login attempts from IP addresses not included in the allowed list.
Vulnerability Detail
The vulnerability in DNN.PLATFORM arises from the potential for a specially crafted request or proxy to bypass the design of the DNN Login IP Filters. This flaw allows malicious actors to attempt logins from IP addresses that should be restricted, thereby increasing the risk of unauthorized access to user accounts. The issue is classified under CWE-863, which pertains to the 'Incorrect Authorization' category, and has been rated with a high severity level due to its implications for user security.
How To Fix
Minimum fixed version
10.0.1
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, administrators can manually monitor and restrict login attempts from suspicious IP addresses until the package is updated. Implementing additional security measures, such as multi-factor authentication, can also help mitigate risks associated with this vulnerability.
Conclusion
The DNN.PLATFORM vulnerability CVE-2025-52487 presents a significant risk by allowing unauthorized login attempts from restricted IP addresses. It is crucial for users to update to version 10.0.1 or later to mitigate this risk and ensure the security of their applications.
See every vulnerability recorded for DNN.PLATFORM →
FAQ
The vulnerability allows unauthorized login attempts from IP addresses that are not in the allowed list due to a bypass of the IP Filters.
You can use the Vulert playground at Vulert Scanner to check if your application is affected without requiring any signup.
If immediate updates are not possible, consider implementing additional security measures such as multi-factor authentication and monitoring login attempts.
Failure to address this vulnerability may lead to unauthorized access to user accounts, data breaches, and potential loss of sensitive information.
You can find more information on the official DNN community forums and security advisories, as well as on platforms like Vulert.
References
Related vulnerabilities
Recent vulnerabilities recorded for DNN.PLATFORM.
