UpHeron
All vulnerabilities

Servers and applications

CVE-2025-32036

The possibility of bypassing Captcha

Severity
Medium 6.5
Published
8 Apr 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.13.8
Also known as
GHSA-48q9-3p26-8595
Sources
NVD, Project advisories (GitHub)

Description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. The algorithm used to generate the captcha image shows the least complexity of the desired image. For this reason, the created image can be easily read by OCR tools, and the intruder can send automatic requests by building a robot and using this tool. This vulnerability is fixed in 9.13.8.

Affected software

SoftwareAffected versions
DNN PlatformServers and applications · cpe:a:dnnsoftware:dotnetnuke
  • Every version before 9.13.8
DNN PlatformServers and applications · github:dnnsoftware/dnn.platform
  • Every version before 9.13.8

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-32036
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-32036
  • GitHub Advisory Database https://github.com/advisories/GHSA-48q9-3p26-8595
  • github.com https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-48q9-3p26-8595