CVE-2025-64095: DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite

October 29, 2025

The default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files.

References

github.com/advisories/GHSA-3m8r-w7xg-jqvw
github.com/dnnsoftware/Dnn.Platform
github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-3m8r-w7xg-jqvw
nvd.nist.gov/vuln/detail/CVE-2025-64095

Code Behaviors & Features

Detect and mitigate CVE-2025-64095 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →