DNN Forceful Friend Request Acceptance Vulnerability

A vulnerability in the friends feature of DNN (formerly DotNetNuke) web content management platform, affects versions 6.0.0 through prior to 10.2.2. The issue allows a user to manipulate a request that forces the acceptance of a friend request on behalf of another user.

Impact

Exploitation of this vulnerability could lead to unauthorized acceptance of friend requests, potentially allowing for unwanted social interactions or connections between users.

Remediation

Users can upgrade to DNN version 10.2.2, where this vulnerability has been patched. Instructions for upgrading DNN can be found in the DNN documentation.