VDB
Sign up
MEDIUM4.2

GHSA-fp6q-gccw-7qqm

Umbraco CMS logout page displayed before session expiration

Quick fix

GHSA-fp6q-gccw-7qqm — Umbraco.CMS: upgrade to the fixed version with the command below.

dotnet add package Umbraco.CMS --version 13.5.2

Details

### Impact The Backoffice displays the logout page with a session timeout message before the server session has fully expired, causing users to believe they have been logged out approximately 30 seconds before they actually are.

Are you affected?

Enter the version of the package you're using.

Affected packages

NuGet/Umbraco.CMS
Introduced in: 13.0.0Fixed in: 13.5.2
Fixdotnet add package Umbraco.CMS --version 13.5.2
NuGet/Umbraco.CMS
Introduced in: 10.0.0Fixed in: 10.8.7
Fixdotnet add package Umbraco.CMS --version 10.8.7
NuGet/UmbracoCMS
Introduced in: 8.0.0Fixed in: 8.18.15
Fixdotnet add package UmbracoCMS --version 8.18.15

References