VULNERABILITY INTELLIGENCE

CVE-2023-49273

CVSS score5.4 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2023-12-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, users with low privileges (Editor, etc.) are able to access some unintended endpoints. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue.

Weakness classification

  • security-advisories@github.com: CWE-863

Primary references