Remote Code Execution (RCE)

DNN.Platform is vulnerable to remote code execution (RCE). This is due to the application storing profile information for users in the DNNPersonalization cookie as XML and the structure includes a type attribute that instructs the server the type of object to create upon deserialization. The deserialization vulnerability in the cookie allows a remote attacker to execute arbitrary code on the system by submitting a malicious cookie to the server.