{"action":"Upgrade Umbraco.Cms.Web.Backoffice to 10.8.9 (10.x) or 13.7.1 (13.x) or later.","affected":[{"fixed":"10.8.9","introduced":"0"},{"fixed":"13.7.1","introduced":"11.0.0-rc1"}],"component":"Umbraco.Cms.Web.Backoffice","cve_ids":["CVE-2025-27602"],"ecosystem":"NuGet","epss":0.00303,"exploited":false,"fixed_versions":["10.8.9","13.7.1"],"ghsa_id":"GHSA-wx5h-wqfq-v698","id":"tcs_01M5N94H1AA03H04FFCN0W3WDB","modified_at":"2025-03-12T15:11:19.083951Z","published_at":"2025-03-11T15:27:34Z","references":["https://osv.dev/vulnerability/GHSA-wx5h-wqfq-v698","https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-wx5h-wqfq-v698","https://nvd.nist.gov/vuln/detail/CVE-2025-27602","https://github.com/umbraco/Umbraco-CMS/commit/5b54bed406682ceff57903bf7d3c57814eef31a7","https://github.com/umbraco/Umbraco-CMS/commit/7888b9a4ce5ae7f9bda7ff3bb705b8fcd2f1675d","https://github.com/umbraco/Umbraco-CMS"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-wx5h-wqfq-v698","url":"https://osv.dev/vulnerability/GHSA-wx5h-wqfq-v698"}],"summary":"Umbraco Allows a Restricted Editor User to Delete Media Item or Access Unauthorized Content"}