CVE-2025-32374

MEDIUM

Dnnsoftware Dotnetnuke < 9.13.8 - Resource Allocation Without Limits

Title source: rule

Description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Possible denial of service with specially crafted information in the public registration form. This vulnerability is fixed in 9.13.8.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-vc6j-mcqj-rgfp

Scores

CVSS v3 5.9

EPSS 0.0032

EPSS Percentile 23.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-770

Status published

Products (1)

dnnsoftware/dotnetnuke < 9.13.8

Published Apr 09, 2025

Tracked Since Feb 18, 2026