CVE-2025-32374: Possible Denial of Service (DoS) in DNN.PLATFORM registration
Published Apr 9, 2025
·Updated
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Possible denial of service with specially crafted information in the public registration form. This vulnerability is fixed in 9.13.8.
Affected Software
2 affected components
DNN Dnn.Platform<9.13.8
dnnsoftware Dotnetnuke<9.13.8
Event History
Apr 9, 2025
CVE Published
via MITRE·03:14 PM
Data Sourced
via MITRE·03:14 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-32374?
CVE-2025-32374 has a severity level that indicates it can lead to denial of service attacks.
2
How do I fix CVE-2025-32374?
To fix CVE-2025-32374, you need to upgrade DNN Platform to version 9.13.8 or later.
3
What type of attack does CVE-2025-32374 allow for?
CVE-2025-32374 allows for denial of service attacks through specially crafted input in the public registration form.
4
Which versions of DNN are affected by CVE-2025-32374?
CVE-2025-32374 affects all versions of DNN Platform prior to 9.13.8.
5
What is DNN in the context of CVE-2025-32374?
In the context of CVE-2025-32374, DNN refers to a web content management platform used in the Microsoft ecosystem.