CVE-2023-49273

Summary

CVE-2023-49273 is a vulnerability affecting Umbraco, an ASP.NET content management system. In versions 8.0.0 and below up to 8.18.10, 10.8.1, and 12.3.4, users with limited privileges, such as Editor, can unintendedly access certain endpoints. This issue potentially exposes sensitive data or functionalities, posing a risk to the security of Umbraco installations. The vulnerability is resolved in versions 8.18.10, 10.8.1, and 12.3.4, which include the necessary patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.