File Upload Vulnerability in DNN CMS by DNN Software

CVE-2025-59547

What is CVE-2025-59547?

DNN, an open-source web content management platform, has a security weakness in the CKEditor file upload endpoint prior to version 10.1.0. This vulnerability allows attackers to exploit insufficient filename sanitization, enabling the upload of files with specially crafted Unicode characters. Such files can translate into paths that potentially expose sensitive internal network resources of the hosted site. A patch has been implemented in version 10.1.0 to mitigate this risk.

References