CVE-2023-49089

Summary

CVE-2023-49089 is a vulnerability affecting Umbraco, an ASP.NET content management system. This issue, present in versions 8.0.0 and earlier than 8.18.10, 10.8.1, and 12.3.0, enables Backoffice users with appropriate permissions to execute path traversal attacks. By exploiting this vulnerability, attackers can write data outside of the designated location, potentially leading to serious security consequences. However, versions 8.18.10, 10.8.1, and 12.3.0 have been released with patches to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.