Executive brief
DNN CKEditor Provider allows unauthenticated upload out-of-the-box
Affected products
- NuGet Dnn.Platform
Junglewise Threat Intelligence
CVE-2025-62802: DNN CKEditor Provider allows unauthenticated upload out-of-the-box
CVE-2025-62802 · Severity: low · CVSS 3.1 · Published 2025-10-29
Technologies: Dnn.Platform (NuGet). Vendors: NuGet.
Related threats
- DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
- DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input
- DNN.PLATFORM possibly allows bypass of IP Filters
- DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed
- DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects