{"action":"Upgrade Umbraco.Cms.Core to 9.2.0 or later.","affected":[{"fixed":"9.2.0","introduced":"0"}],"component":"Umbraco.Cms.Core","cve_ids":["CVE-2022-22690"],"ecosystem":"NuGet","epss":0.01138,"exploited":false,"fixed_versions":["9.2.0"],"ghsa_id":"GHSA-jrmq-rv9w-63rv","id":"tcs_01M5N8SZVJJ541574QCXS5CACG","modified_at":"2024-02-19T05:20:35.102437Z","published_at":"2022-01-21T23:34:24Z","references":["https://osv.dev/vulnerability/GHSA-jrmq-rv9w-63rv","https://nvd.nist.gov/vuln/detail/CVE-2022-22690","https://appcheck-ng.com/umbraco-applicationurl-overwrite-persistent-password-reset-poison-cve-2022-22690-cve-2022-22691","https://github.com/umbraco/Umbraco-CMS"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-jrmq-rv9w-63rv","url":"https://osv.dev/vulnerability/GHSA-jrmq-rv9w-63rv"}],"summary":"Umbraco ApplicationURL Overwrite"}