Unrated severityNVD Advisory· Published Apr 9, 2025· Updated Apr 9, 2025
DNN allows a registered user to enumerate and access files they should not have access to
CVE-2025-32373
Description
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In limited configurations, registered users may be able to craft a request to enumerate/access some portal files they should not have access to. This vulnerability is fixed in 9.13.8.
Affected products
1- Range: < 9.13.8
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-vxcm-4rwh-chpcmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.