CVE-2025-32372: DotNetNuke.Core Vulnerable to Server-Side Request Forgery (SSRF)

April 9, 2025

A bypass has been identified for the previously known vulnerability CVE-2017-0929, allowing unauthenticated attackers to execute arbitrary GET requests against target systems, including internal or adjacent networks.

References

github.com/advisories/GHSA-3f7v-qx94-666m
github.com/dnnsoftware/Dnn.Platform
github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-3f7v-qx94-666m
nvd.nist.gov/vuln/detail/CVE-2025-32372

Code Behaviors & Features

Detect and mitigate CVE-2025-32372 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →