PT-2025-15636 · Dnn · Dnn

Rasoul-Siyami · Published 2025-04-08 · Updated 2025-08-26 · CVE-2025-32036

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: DNN (formerly DotNetNuke) versions prior to 9.13.8

Description: The algorithm used to generate the captcha image in DNN (formerly DotNetNuke) shows the least complexity of the desired image, making it easily readable by OCR tools. This allows an intruder to send automatic requests by building a robot and using this tool.

Recommendations: For versions prior to 9.13.8, update to version 9.13.8 to resolve the issue. As a temporary workaround, consider restricting access to the captcha functionality until the update is applied.

Exploit

Fix

Weakness Enumeration

CWE-804

Related Identifiers

CVE-2025-32036

GHSA-48Q9-3P26-8595

Affected Products

Dnn

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32036.json · Exploit
• https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-48q9-3p26-8595 · Vendor Advisory
• https://github.com/dnnsoftware/Dnn.Platform/commit/abda726e75f1938c8d89795b5dceb80dc4e2e6c5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-32036 · Security Note
• https://osv.dev/vulnerability/CVE-2025-32036 · Vendor Advisory
• https://twitter.com/CVEnew/status/1909906931575124031 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1909806934221369574 · Twitter Post
• https://t.me/cveNotify/133380 · Telegram Post
• https://t.me/cvetracker/21166 · Telegram Post