CVE-2023-38694
Umbraco CMS vulnerable to possible injection of HTML in an unintended form
Résumé
Umbraco CMS vulnerable to possible injection of HTML in an unintended form
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.7.0, and 12.1.0, a user with access to a specific part of the backoffice is able to inject HTML code into a form where it is not intended. Versions 8.18.10, 10.7.0, and 12.1.0 contain a patch for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov