Skip to content
OpenAdvisories

Package · NuGet

Plumber.Workflow

1 known vulnerabilities.

1 result · Feed

  • Medium 5.5

    Umbraco Workflow's Backoffice users can execute arbitrary SQL

    Umbraco workflow provides workflows for the Umbraco content management system. Prior to versions 10.3.9, 12.2.6, and 13.0.6, an Umbraco Backoffice user can modify requests to a particular API endpoint to include SQL, which will be executed by the server. Umbr…