CVE-2023-38694
1 advisory.
NuGet/Umbraco.CMS CVE-2023-38694: unknown 0, EPSS 0.41%
Possible injection of HTML into user invite mails
Action: Upgrade Umbraco.CMS to 8.18.10 (8.x), 10.7.0 (10.x) or 12.1.0 (12.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 8.18.10 | - |
| 9.0.0 | 10.7.0 | - |
| 11.0.0 | 12.1.0 | - |
Fixed versions
| 8.18.10 | 10.7.0 | 12.1.0 |
Sources
- osv: GHSA-xxc6-35r7-796w
- https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-xxc6-35r7-796w
- https://nvd.nist.gov/vuln/detail/CVE-2023-38694
- https://github.com/umbraco/Umbraco-CMS
CVE-2023-38694 · published · modified · JSON