| Package | Affected versions | Patched versions |
|---|---|---|
| umbraco cms | ≤ 6.0.3 |
The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS before 6.0.4 does not require authentication, which allows remote attackers to execute arbitrary ASP.NET code via a crafted SOAP request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free