| Package | Affected versions | Patched versions |
|---|---|---|
| Umbraco.Cms.Infrastructure | ≥ 11.0.0, < 11.4.2≥ 12.0.0, < 12.0.1≥ 9.0.0, < 10.6.1 | 11.4.212.0.110.6.1 |
| Umbraco.Cms.Web.BackOffice | ≥ 11.0.0, < 11.4.2≥ 12.0.0, < 12.0.1≥ 9.0.0, < 10.6.1 | 11.4.212.0.110.6.1 |
| umbraco cms | ≥ 10.0.0, < 10.6.1≥ 11.0.0, < 11.4.2≥ 12.0.0, < 12.0.1 | 10.6.111.4.212.0.1 |
Under rare conditions, a restart of Umbraco can allow unauthorized users to gain admin-level permissions.
An unauthorized user gaining admin-level access and permissions to the backoffice.
10.6.1, 11.4.2, 12.0.1
*/install/* and */umbraco/* will limit the exposure to allowed IP addresses.Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free