CVE-2025-32017

Published April 8th, 2025

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

Umbraco is a free and open source .NET content management system. Authenticated users to the Umbraco backoffice are able to craft management API request that exploit a path traversal vulnerability to upload files into a incorrect location. The issue affects Umbraco 14+ and is patched in 14.3.4 and 15.3.1.

umbraco/Umbraco-CMS

Umbraco is a free and open source .NET content management system helping you deliver delightful digital experiences.

GitHub

5.19K