Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-32036

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. The algorithm used to generate the captcha image shows the least complexity of the desired image. For this reason, the created image can be easily read by OCR tools, and the intruder can send automatic requests by building a robot and using this tool. This vulnerability is fixed in 9.13.8.

Published

2025-04-08T18:16:08.750

Last Modified

2025-08-26T00:50:57.373

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.2 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-804
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application dnnsoftware dotnetnuke < 9.13.8 Yes
References