CVE-2025-59547: DNN's CKEditor File Uploader functionality vulnerable through Unicode obfuscation
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, the CKEditor file upload endpoint has insufficient sanitization for filenames allowing probing network endpoints. A specially crafted request can be made to upload a file with Unicode characters, which would be translated into a path that could expose resources in the internal network of the hosted site. This issue has been patched in version 10.1.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59547?
CVE-2025-59547 has been classified with a medium severity due to its potential exploitation regarding file upload vulnerabilities.
How do I fix CVE-2025-59547?
To fix CVE-2025-59547, upgrade DNN to version 10.1.0 or later where the vulnerability is resolved.
What is affected by CVE-2025-59547?
CVE-2025-59547 affects all versions of DNN prior to 10.1.0.
Can CVE-2025-59547 be exploited remotely?
Yes, CVE-2025-59547 can be exploited remotely by sending specially crafted requests to the CKEditor file upload endpoint.
What types of attacks could be facilitated by CVE-2025-59547?
CVE-2025-59547 could facilitate attacks that allow probing of network endpoints through insufficiently sanitized filenames.