PT-2025-44219 · Dotnetnuke · Dnn

Published 2025-10-28 · Updated 2025-11-03 · CVE-2025-62802

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions DNN (formerly DotNetNuke) versions prior to 10.1.1

Description DNN (formerly DotNetNuke) is an open-source web content management platform. Before version 10.1.1, unauthenticated users could upload files through the default HTML editing functionality. This presents a potential pathway to further security concerns and is generally unnecessary for most deployments.

Recommendations Update to version 10.1.1 or later.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

CWE-1188

Related Identifiers

CVE-2025-62802

GHSA-2374-6CVW-QMX6

Affected Products

Dnn

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62802.json · Exploit
• https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-2374-6cvw-qmx6 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2374-6cvw-qmx6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62802 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62802 · Vendor Advisory
• https://github.com/dnnsoftware/Dnn.Platform · Note
• https://github.com/dnnsoftware/Dnn.Platform/commit/6497d3c35217e6e62e50d3ed7c8809eb69e3d06b · Note
• https://t.me/cveNotify/140764 · Telegram Post
• https://t.me/CVEtracker/36008 · Telegram Post
• https://twitter.com/CVEnew/status/1983290301566595375 · Twitter Post
• https://t.me/cveNotify/141412 · Telegram Post
• https://reddit.com/r/VulnMatter/comments/1ok2mxi/resumen_diario_de_vulnerabilidades_30102025 · Reddit Post
• https://twitter.com/VulmonFeeds/status/1983358921705165262 · Twitter Post