DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. An unauthenticated user can upload and replace existing files allowing defacing a website and combined with other issue, injection XSS payloads. This vulnerability is fixed in 10.1.1.

DotNetNuke CMS versions prior to 10.1.1 are affected by an unrestricted file upload vulnerability due to improper validation of uploaded files in the default HTML editor provider. This vulnerability allows unauthenticated users to upload files without proper restrictions, potentially leading to overwriting existing files on the server.

An attacker could exploit this vulnerability by uploading malicious files, which could lead to website defacement or, when combined with other vulnerabilities, the execution of cross-site scripting (XSS) payloads.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft
    ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and
    images can overwrite existing files. An unauthenticated user can upload and replace existing files
    allowing defacing a website and combined with other issue, injection XSS payloads. This vulnerability is
    fixed in 10.1.1. (CVE-2025-64095)

ID	Name	Product	Family	Severity
115031	DotNetNuke < 10.1.1 Unrestricted File Upload	Web App Scanning	Component Vulnerability	critical
435871	SCA: security update for DNN.PLATFORM (GHSA-3m8r-w7xg-jqvw)	Tenable Cloud Security	SCA Checks	critical
435871	SCA: security update for DNN.PLATFORM (GHSA-3m8r-w7xg-jqvw)	Tenable Self-Hosted Container Security	SCA Checks	critical

Detections

Analytics

CVE-2025-64095

critical

Tenable Plugins

critical

critical

critical