UpHeron
All vulnerabilities

Servers and applications

CVE-2025-32374

Possible Denial of Service (DoS) in DNN.PLATFORM registration

Severity
High 7.5
Published
8 Apr 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.13.8
Also known as
GHSA-vc6j-mcqj-rgfp
Sources
NVD, Project advisories (GitHub)

Description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Possible denial of service with specially crafted information in the public registration form. This vulnerability is fixed in 9.13.8.

Affected software

SoftwareAffected versions
DNN PlatformServers and applications · cpe:a:dnnsoftware:dotnetnuke
  • Every version before 9.13.8
DNN PlatformServers and applications · github:dnnsoftware/dnn.platform
  • Every version before 9.13.8

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-32374
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-32374
  • GitHub Advisory Database https://github.com/advisories/GHSA-vc6j-mcqj-rgfp
  • github.com https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-vc6j-mcqj-rgfp