CVE-2019-19392

The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.

The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.

El módulo forDNN.UsersExportImport versiones anteriores a 1.2.0 para DNN (anteriormente DotNetNuke), permite a un usuario no privilegiado importar (crear) nuevos usuarios con privilegios de Administrador, como es demostrado por Roles="Administrators" en datos XML o CSV.