GitHub Advisoryadvisory · NuGet

GHSA-335x-5wcm-8jv2 Backoffice User can bypass "Publish" restriction

LOW Published 2023-12-13 Modified 2024-01-12 Official page ↗
Aliases
CVE-2023-48227
Ecosystem
NuGet
Packages
Umbraco.CMS
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N
Weaknesses
CWE-863
Reviewed
2023-12-13

Affected packages

• NuGet Umbraco.CMS: >= 8.0.0, < 8.18.10 → fixed in 8.18.10 • NuGet Umbraco.CMS: >= 9.0.0, < 10.8.0 → fixed in 10.8.0 • NuGet Umbraco.CMS: >= 11.0.0, < 12.3.0 → fixed in 12.3.0

Description

Impact Backoffice users with send for approval permission but not publish permission are able to publish in some scenarios. Explanation of the vulnerability Backoffice users without permission to publish content, but only to send for approval, can bypass the restriction by modifying the request body of the "Send for Approval" request.

Related

Alias · CVE (1)

  • CVE-2023-48227 Umbraco is an ASP.NET content management system (CMS). vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References