{"action":"Upgrade Umbraco.Cms to 14.3.4 (14.x) or 15.3.1 (15.x) or later.","affected":[{"fixed":"14.3.4","introduced":"14.0.0--preview004"},{"fixed":"15.3.1","introduced":"15.0.0-rc1"}],"component":"Umbraco.Cms","cve_ids":["CVE-2025-32017"],"ecosystem":"NuGet","epss":0.00633,"exploited":false,"fixed_versions":["14.3.4","15.3.1"],"ghsa_id":"GHSA-q62r-8ppj-xvf4","id":"tcs_01M5N8XKNMF0KCQMTT7M9AFTA1","modified_at":"2025-04-09T17:32:13.162092Z","published_at":"2025-04-09T12:49:38Z","references":["https://osv.dev/vulnerability/GHSA-q62r-8ppj-xvf4","https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-q62r-8ppj-xvf4","https://nvd.nist.gov/vuln/detail/CVE-2025-32017","https://github.com/umbraco/Umbraco-CMS/commit/06a2a500b358ce15b1e228391eb60bd517c6e833","https://github.com/umbraco/Umbraco-CMS/commit/d3c1443b14b1076faf13d1bcecc42860fdf5fad8","https://github.com/umbraco/Umbraco-CMS"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-q62r-8ppj-xvf4","url":"https://osv.dev/vulnerability/GHSA-q62r-8ppj-xvf4"}],"summary":"Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users"}