CVE-2025-64095 — Vulnerability in DNN.PLATFORM — CVE Details

CRITICAL

DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite

Published October 29, 2025Updated October 29, 2025Source: osv

Summary

### Summary The default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. ### Description An unauthenticated user can upload and replace existing files allowing defacing a website and combined with other issue, injection XSS payloads.

Advisory Timeline

First published October 29, 2025 (348 days ago).
Last revised October 29, 2025 — 0 days after initial publication.

Remediation

Upgrade to the fixed version using your package manager.

NuGet

Update DNN.PLATFORM to 10.1.1 or later

dotnet add package DNN.PLATFORM --version 10.1.1

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (1)

Affects 1 ecosystem: nuget (1).

Package	Ecosystem	Affected	Fixed In
DNN.PLATFORM	nuget	7.2.0, 7.3.0, 7.4.0, 8.0.0 (+4 more)	10.1.1

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-434
Unrestricted File UploadMITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 10.0 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

Frequently Asked Questions

What is CVE-2025-64095?: DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 10.0/10).
How do I check if my project is affected by CVE-2025-64095?: CVE-2025-64095 affects DNN.PLATFORM. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2025-64095 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

10.0

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-3m8r-w7xg-jqvw

Related CVEs

CVE-2026-75513
CRITICAL
Marten's LINQ provider has SQL injection via unescaped string literals
CVE-2026-105794
CRITICAL
MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL
CVE-2025-52487
HIGH
DNN.PLATFORM possibly allows bypass of IP Filters
CVE-2025-52488
HIGH
DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input
CVE-2025-52486
MEDIUM
DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects
CVE-2025-52485
MEDIUM
DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed

More NuGet advisories

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies