CVE-2025-66625
1 advisory.
NuGet/Umbraco.Cms CVE-2025-66625: medium 4.9
Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
Action: Upgrade Umbraco.Cms to 13.12.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0.0 | 13.12.1 | - |
Fixed versions
| 13.12.1 |
Sources
- osv: GHSA-hfv2-pf68-m33x
- https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-hfv2-pf68-m33x
- https://nvd.nist.gov/vuln/detail/CVE-2025-66625
- https://github.com/umbraco/Umbraco-CMS/commit/7505efd433189037f46547932d4a8b603fd4a615
- https://github.com/umbraco/Umbraco-CMS
CVE-2025-66625 · published · modified · JSON