CVE-2025-32373 — DNN allows a registered user to enumerate and access files they should not have access to

CVE-2025-32373

DNN allows a registered user to enumerate and access files they should not have access to PUBLISHED

Description (CNA)

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In limited configurations, registered users may be able to craft a request to enumerate/access some portal files they should not have access to. This vulnerability is fixed in 9.13.8.

Affected (CNA)

Vendor / product	Versions
dnnsoftware / Dnn.Platform	affected < 9.13.8

CWE

CWE-639

References

https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-vxcm-4rwh-chpc

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.