| Package | Affected versions | Patched versions |
|---|---|---|
| Umbraco.Cms | ≥ 14.0.0, < 14.1.2 | 14.1.2 |
| umbraco cms | ≥ 14.0.0, < 14.1.2 | 14.1.2 |
As an authenticated user one can access a few unintended endpoints
Few endpoints in Umbraco Management API was not protected by a specific section. These just required you to be authenticated. Due to the fact that a member is also just authenticated, it was possible to get info from these endpoints using a member token.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free