{"action":"Upgrade Umbraco.Cms.Core to 9.2.0 or later.","affected":[{"fixed":"9.2.0","introduced":"0"}],"component":"Umbraco.Cms.Core","cve_ids":["CVE-2022-22691"],"ecosystem":"NuGet","epss":0.01016,"exploited":false,"fixed_versions":["9.2.0"],"ghsa_id":"GHSA-r8pr-83cc-ccv7","id":"tcs_01M5N8ZR6Y29C3XZ84QR8D6F0K","modified_at":"2024-02-19T05:32:12.994526Z","published_at":"2022-01-21T23:34:27Z","references":["https://osv.dev/vulnerability/GHSA-r8pr-83cc-ccv7","https://nvd.nist.gov/vuln/detail/CVE-2022-22691","https://appcheck-ng.com/umbraco-applicationurl-overwrite-persistent-password-reset-poison-cve-2022-22690-cve-2022-22691","https://github.com/umbraco/Umbraco-CMS"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-r8pr-83cc-ccv7","url":"https://osv.dev/vulnerability/GHSA-r8pr-83cc-ccv7"}],"summary":"Umbraco Persistent Password Reset Poison"}