medium6.5
CVE-2025-32373
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.
Impact
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In limited configurations, registered users may be able to craft a request to enumerate/access some portal files they should not have access to. This vulnerability is fixed in 9.13.8.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dnnsoftware | Dotnetnuke | before 9.13.8 |