Package · NuGet

Umbraco.Cms.Infrastructure

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2023-37267

Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions

Umbraco is a ASP.NET CMS. Under rare conditions a restart of Umbraco can allow unauthorized users access to admin-level permissions. This vulnerability was patched in versions 10.6.1, 11.4.2 and 12.0.1.

umbraco Umbraco-CMS Umbraco.Cms.Web.BackOffice Umbraco.Cms.Infrastructure NuGet

Jul 13, 2023