Unrated severityNVD Advisory· Published Apr 9, 2025· Updated Apr 9, 2025
Unexpected external content may be displayed in DNN ImageHandler
CVE-2025-32371
Description
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. A url could be crafted to the DNN ImageHandler to render text from a querystring parameter. This text would display in the resulting image and a user that trusts the domain might think that the information is legitimate. This vulnerability is fixed in 9.13.4.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: < 9.13.4
Patches
Vulnerability mechanics
References
2- github.com/dnnsoftware/Dnn.Platform/commit/5def7cc2e7931bb1041b21540bde99f96874a5a9mitrex_refsource_MISC
- github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-2rrc-g594-rhqwmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.