Vulnerability · Published Apr 8, 2025 · Assigned by GitHub_M

CVE-2025-32036DNN allows the possibility of bypassing Captcha

Medium 4.2

In plain English

A medium-severity security flaw in Dnn.Platform from dnnsoftware. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).

Severity (CVSS 3.1)4.2Medium

Exploit odds (30 days)0.3%top 75.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. The algorithm used to generate the captcha image shows the least complexity of the desired image. For this reason, the created image can be easily read by OCR tools, and the intruder can send automatic requests by building a robot and using this tool. This vulnerability is fixed in 9.13.8.

Affected products (as reported)

Vendor	Product	Versions
dnnsoftware	Dnn.Platform	< 9.13.8

Weakness: CWE-804 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

References

https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-48q9-3p26-8595 x_refsource_CONFIRM
https://github.com/dnnsoftware/Dnn.Platform/commit/abda726e75f1938c8d89795b5dceb80dc4e2e6c5 x_refsource_MISC