Umbraco.Cms.Infrastructure

NuGet1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting Umbraco.Cms.Infrastructurepage 1 of 1

CVE-2023-37267HIGHCVSS 7.5EG 7.5✓ Fixed in 12.0.1
2023-07-13
vulnerable: 12.0.0
Umbraco is a ASP.NET CMS. Under rare conditions a restart of Umbraco can allow unauthorized users access to admin-level permissions. This vulnerability was patched in versions 10.6.1, 11.4.2 and 12.0.1.

Check whether Umbraco.Cms.Infrastructure is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for Umbraco.Cms.Infrastructure CVEs against the assets you own.

Start Free Scan →