CVE-2025-64095 | DNN (formerly DotNetNuke) is an open-source web content mana… | CVSS 10.0 CRITICAL

Description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. An unauthenticated user can upload and replace existing files allowing defacing a website and combined with other issue, injection XSS payloads. This vulnerability is fixed in 10.1.1.

Metadata

CVE ID: CVE-2025-64095
State: PUBLISHED
Assigner: GitHub_M
Reserved: 2025-10-27 15:26 UTC
Published: 2025-10-28 21:46 UTC
Last updated: 2025-10-29 14:51 UTC
Primary CWE: CWE-434
CWE-434: Unrestricted Upload of File with Dangerous Type
Vendor / Product: dnnsoftware / Dnn.Platform
Sources: cve.org · NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
dnnsoftware	Dnn.Platform	—	< 10.1.1

Weakness (CWE)

CWE	Source	Description
CWE-434	cna	CWE-434: Unrestricted Upload of File with Dangerous Type

CVSS scores (1)

Score	Severity	Version	Source	Vector
10.0	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References (1)

https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-3m8r-w7xg-jqvw https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-3m8r-w7xg-jqvw