CVE-2025-48953
Umbraco is an ASP.NET content management system (CMS). Starting in version 14.0.0 and prior to versions 15.4.2 and 16.0.0, it's possible to upload a file that doesn't adhere with the configured allowable file extensions via a manipulated API request. The issue is patched in versions 15.4.2 and 16.0.0. No known workarounds are available.
Vendor
Product
CWE
Yayın Tarihi
2025-06-03 19:15:39
Güncelleme
2025-09-22 13:54:31
Source Identifier
security-advisories@github.com
KEV Date Added
-