LOW3.7
GHSA-552f-97wf-pmpq
Umbraco possible user enumeration
Quick fix
GHSA-552f-97wf-pmpq — UmbracoCMS: upgrade to the fixed version with the command below.
dotnet add package UmbracoCMS --version 10.8.5Details
### Impact A user enumeration attack is possible.
### Affected versions Umbraco 10 with access to the native login screen
### Patches This is fixed in 10.8.5
### Workarounds Disabling the native login screen, by exclusively use external logins.
Are you affected?
Enter the version of the package you're using.
Affected packages
NuGet/UmbracoCMS
Introduced in:
10.0.0Fixed in: 10.8.5Fix
dotnet add package UmbracoCMS --version 10.8.5