CVE-2025-32373 — DNN allows a registered user to enumerate and access files they should not have access to
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In limited configurations, registered users may be able to craft a …
Published: 2025-04-09 · CVSS: 6.5 · CVSS 3.1
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In limited configurations, registered users may be able to craft a request to enumerate/access some portal files they should not have access to. This vulnerability is fixed in 9.13.8.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7