CVE-2023-37267
Fixed upstream EPSS <1%CVSS 7.5
Umbraco is a ASP.NET CMS. Under rare conditions a restart of Umbraco can allow unauthorized users access to admin-level permissions. This vulnerability was patched in versions 10.6.1, 11.4.2 and 12.0.1.
Products: Umbraco CMS
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| NuGet | Umbraco.Cms.Infrastructure | 10.6.1 |
| NuGet | Umbraco.Cms.Infrastructure | 11.4.2 |
| NuGet | Umbraco.Cms.Infrastructure | 12.0.1 |
| NuGet | Umbraco.Cms.Web.BackOffice | 10.6.1 |
| NuGet | Umbraco.Cms.Web.BackOffice | 11.4.2 |
| NuGet | Umbraco.Cms.Web.BackOffice | 12.0.1 |