| Package | Affected versions | Patched versions |
|---|---|---|
| Umbraco.Cms.Web.BackOffice | ≥ 10.5.0, < 10.8.6≥ 12.0.0, < 12.3.10≥ 13.0.0, < 13.3.1≥ 8.18.5, < 8.18.14 | 10.8.612.3.1013.3.18.18.14 |
| UmbracoCms.Core | ≥ 10.5.0, < 10.8.6≥ 12.0.0, < 12.3.10≥ 13.0.0, < 13.3.1≥ 8.18.5, < 8.18.14 | 10.8.612.3.1013.3.18.18.14 |
| umbraco cms | ≥ 10.5.0, < 10.8.6≥ 12.0.0, < 12.3.10≥ 13.0.0, < 13.3.1≥ 8.18.5, < 8.18.14 | 10.8.612.3.1013.3.18.18.14 |
Umbraco have an endpoint that is vulnerable to open redirects. The endpoint is protected so it requires the user to be signed into backoffice, before the vulnerability is exposed.
>= 8.18.5, >= 10.5.0, >= 12.0.0, >= 13.0.0
8.18.14, 10.8.6, 12.3.10, 13.3.1
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free