CVE-2023-49273

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, users with low privileges (Editor, etc.) are able to access some unintended endpoints. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published: Dec 12, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-492745.3Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a user e CVE-2023-492756.5Wazuh is a free and open source platform used for threat prevention, detection, and response. A NULL pointer dereference was detected during CVE-2023-492766.1Uptime Kuma is an open source self-hosted monitoring tool. In affected versions the Google Analytics element in vulnerable to Attribute Inje CVE-2023-492776.1dpaste is an open source pastebin application written in Python using the Django framework. A security vulnerability has been identified in CVE-2023-492785.3Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a brute CVE-2023-492795.4Umbraco is an ASP.NET content management system (CMS). Starting in version 7.0.0 and prior to versions 7.15.11, 8.18.9, 10.7.0, 11.5.0, and CVE-2023-49287.2SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1.CVE-2023-492806.5XWiki Change Request is an XWiki application allowing to request changes on a wiki without publishing directly the changes. Change request a CVE-2023-492816.1Calendarinho is an open source calendaring application to manage large teams of consultants. An Open Redirect issue occurs when a web applic CVE-2023-492825.3msgraph-sdk-php is the Microsoft Graph Library for PHP. The Microsoft Graph PHP SDK published packages which contained test code that enable CVE-2023-492835.3microsoft-graph-core the Microsoft Graph Library for PHP. The Microsoft Graph Beta PHP SDK published packages which contained test code that CVE-2023-492846.6fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-chara