File Upload Vulnerability in DNN by DNN Software

CVE-2025-32035

What is CVE-2025-32035?

DNN, an open-source web content management platform, suffers from a security flaw that allows attackers to upload files without proper content validation. Specifically, prior to version 9.13.2, the platform only checks the file extension, which could be easily spoofed. This gap in validation permits the upload of potentially harmful executable files disguised as safe file types, such as JPEG images. Once uploaded, these files could be executed through other security vulnerabilities, posing significant risks to the integrity and security of the web application.

References