CVE-2023-48227

Summary

CVE-2023-48227 is a vulnerability affecting Umbraco, an ASP.NET content management system. In versions 8.0.0 and earlier, including 8.18.10, 10.7.0, and 12.3.0, users with "send for approval" permissions but not "publish" permissions can publish content in certain situations, bypassing the intended access control. This issue has been patched in versions 8.18.10, 10.7.0, and 12.3.0. No known workarounds are available for unaffected users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.