CVE-2025-32371
Unexpected external content may be displayed in DNN ImageHandler
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Unexpected external content may be displayed in DNN ImageHandler
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. A url could be crafted to the DNN ImageHandler to render text from a querystring parameter. This text would display in the resulting image and a user that trusts the domain might think that the information is legitimate. This vulnerability is fixed in 9.13.4.
Reserved 2025-04-06 | Published 2025-04-09 | Updated 2025-04-09 | Assigner GitHub_MCWE-451: User Interface (UI) Misrepresentation of Critical Information
github.com/...atform/security/advisories/GHSA-2rrc-g594-rhqw
github.com/...ommit/5def7cc2e7931bb1041b21540bde99f96874a5a9
Support options
