Vulnerability Details CVE-2023-37267
Umbraco is a ASP.NET CMS. Under rare conditions a restart of Umbraco can allow unauthorized users access to admin-level permissions. This vulnerability was patched in versions 10.6.1, 11.4.2 and 12.0.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.9%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2023-37267
-
cpe:2.3:a:umbraco:umbraco_cms:10.0.0
-
cpe:2.3:a:umbraco:umbraco_cms:10.0.1
-
cpe:2.3:a:umbraco:umbraco_cms:10.1.0
-
cpe:2.3:a:umbraco:umbraco_cms:10.1.1
-
cpe:2.3:a:umbraco:umbraco_cms:10.2.0
-
cpe:2.3:a:umbraco:umbraco_cms:10.2.1
-
cpe:2.3:a:umbraco:umbraco_cms:10.3.0
-
cpe:2.3:a:umbraco:umbraco_cms:10.3.1
-
cpe:2.3:a:umbraco:umbraco_cms:10.3.2
-
cpe:2.3:a:umbraco:umbraco_cms:10.4.0
-
cpe:2.3:a:umbraco:umbraco_cms:10.4.1
-
cpe:2.3:a:umbraco:umbraco_cms:10.4.2
-
cpe:2.3:a:umbraco:umbraco_cms:10.5.0
-
cpe:2.3:a:umbraco:umbraco_cms:10.5.1
-
cpe:2.3:a:umbraco:umbraco_cms:10.6.0
-
cpe:2.3:a:umbraco:umbraco_cms:11.0.0
-
cpe:2.3:a:umbraco:umbraco_cms:11.1.0
-
cpe:2.3:a:umbraco:umbraco_cms:11.2.0
-
cpe:2.3:a:umbraco:umbraco_cms:11.2.1
-
cpe:2.3:a:umbraco:umbraco_cms:11.2.2
-
cpe:2.3:a:umbraco:umbraco_cms:11.3.0
-
cpe:2.3:a:umbraco:umbraco_cms:11.3.1
-
cpe:2.3:a:umbraco:umbraco_cms:11.4.0
-
cpe:2.3:a:umbraco:umbraco_cms:12.0.0