NuGet/Umbraco.Cms.Web.BackOffice — 3 CVEs

HIGH7.5CVE-2023-37267Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions

>= 9.0.0, < 10.6.1

MEDIUM6.1CVE-2024-34071Umbraco CMS Open Redirect Bypass Protection

>= 8.18.5, < 8.18.14

MEDIUM4.1CVE-2024-29035Blind SSRF Leads to Port Scan by using Webhooks

>= 13.0.0, < 13.1.1

pkg:NuGet/Umbraco.Cms.Web.BackOffice