Plumber.Workflow
Workflow for Umbraco CMS
Activity
- Latest release
- 2y ago
- Total releases
- 203
- Cadence
- ~6 days
- Last 12 months
- 0
Details
- First release
- Nov 10, 2019
| Version | Released | |
|---|---|---|
2.1.13
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.13
patch
Dependencies (8)
|
|
10.1.2
patch
|
10.1.2
patch
Dependencies (5)
|
|
2.1.12
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.12
patch
Dependencies (8)
|
|
2.1.11
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.11
patch
Dependencies (8)
|
|
2.1.10
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.10
patch
Dependencies (8)
|
|
10.1.1
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
10.1.1
patch
Dependencies (5)
|
|
2.1.9
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.9
patch
Dependencies (8)
|
|
10.1.0
minor
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
10.1.0
minor
Dependencies (5)
|
|
10.1.0-rc
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
10.1.0-rc
pre
Dependencies (5)
|
|
10.0.2-rc
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
10.0.2-rc
pre
Dependencies (5)
|
|
2.1.8
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.8
patch
Dependencies (8)
|
|
10.0.1
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
10.0.1
patch
Dependencies (5)
|
|
10.0.0
major
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
10.0.0
major
Dependencies (5)
|
|
2.1.7
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.7
patch
Dependencies (8)
|
|
2.1.6
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.6
patch
Dependencies (8)
|
|
2.1.5
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.5
patch
Dependencies (8)
|
|
2.1.4
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.4
patch
Dependencies (8)
|
|
2.1.3
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.3
patch
Dependencies (8)
|
|
2.1.2
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.2
patch
Dependencies (8)
|
|
2.1.2-rc.909
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.2-rc.909
pre
Dependencies (8)
|
|
2.1.1
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.1
patch
Dependencies (8)
|
|
2.1.1-rc.897
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.1-rc.897
pre
Dependencies (8)
|
|
2.1.0
minor
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.0
minor
Dependencies (8)
|
|
2.1.0-rc.886
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.0-rc.886
pre
Dependencies (8)
|
|
2.1.0-rc.884
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.0-rc.884
pre
Dependencies (8)
|
|
2.1.0-rc
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.1.0-rc
pre
Dependencies (8)
|
|
2.0.2
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.0.2
patch
Dependencies (8)
|
|
2.0.2-rc001.879
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.0.2-rc001.879
pre
Dependencies (8)
|
|
2.0.2-rc001.878
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.0.2-rc001.878
pre
Dependencies (8)
|
|
1.6.9-beta-000874
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.9-beta-000874
pre
Dependencies (2)
|
|
2.0.1
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.0.1
patch
Dependencies (8)
|
|
2.0.0
major
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
2.0.0
major
Dependencies (8)
|
|
1.6.8
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.8
patch
Dependencies (2)
|
|
1.6.7
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.7
patch
Dependencies (2)
|
|
1.6.6
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.6
patch
Dependencies (2)
|
|
1.6.5
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.5
patch
Dependencies (2)
|
|
1.6.4
patch
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.4
patch
Dependencies (2)
|
|
1.6.4-beta-000656
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.4-beta-000656
pre
Dependencies (2)
|
|
1.6.4-beta-000654
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.4-beta-000654
pre
Dependencies (2)
|
|
1.6.3-beta-000651
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.3-beta-000651
pre
Dependencies (2)
|
|
1.6.3-beta-000648
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.3-beta-000648
pre
Dependencies (2)
|
|
1.6.3-beta-000643
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.3-beta-000643
pre
Dependencies (2)
|
|
1.6.3-beta-000638
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.3-beta-000638
pre
Dependencies (2)
|
|
1.6.3-beta-000634
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.3-beta-000634
pre
Dependencies (2)
|
|
1.6.3-beta-000633
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.3-beta-000633
pre
Dependencies (2)
|
|
1.6.3-beta-000631
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.3-beta-000631
pre
Dependencies (2)
|
|
1.6.3-beta-000630
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.3-beta-000630
pre
Dependencies (2)
|
|
1.6.3-beta-000629
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.3-beta-000629
pre
Dependencies (2)
|
|
1.6.3-beta-000627
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.3-beta-000627
pre
Dependencies (2)
|
|
1.6.3-beta-000616
pre
1 CVE
CVE-2024-32872
GHSA-287f-46j7-j4wh
Apr 24, 2024
Umbraco Workflow's Backoffice users can execute arbitrary SQL
5.5
/ 10
Medium
Network
Low
High
None
Unchanged
Low
High
None
ImpactBackoffice users can execute arbitrary SQL. Explanation of the vulnerabilityA Backoffice user can modify requests to a particular API endpoint to include SQL which will be executed by the server. Affected versionsAll versions PatchesWorkflow 10.3.9, 12.2.6, 13.0.6, Plumber 10.1.2 ReferencesAffected versions
1.0.0
1.0.0-alpha-000230
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
+ 207 more Show less
1.1.2-beta-000314
1.1.3
1.1.3-beta-000315
1.1.3-beta-000318
1.1.3-beta-000319
1.1.3-beta-000329
1.1.4-beta-000333
1.2.0
1.2.0-beta-000339
1.2.0-beta-000340
1.2.0-beta-000341
1.2.0-beta-000342
1.2.0-beta-000343
1.2.0-beta-000344
1.2.0-beta-000345
1.2.0-beta-000346
1.2.0-beta-000349
1.2.0-beta-000350
1.2.0-beta-000351
1.2.0-beta-000355
1.2.0-beta-000356
1.2.0-beta-000357
1.2.0-beta-000359
1.2.0-beta-000360
1.2.0-beta-000363
1.2.1
1.2.1-beta-000365
1.2.1-beta-000366
1.2.1-beta-000367
1.2.1-beta-000368
1.2.1-beta-000371
1.2.2-beta-000372
1.3.0
1.3.0-beta-000375
1.3.1
1.3.1-beta-000377
1.3.2
1.3.3
1.3.3-beta-000382
1.3.4
1.3.5
1.3.5-beta-000389
1.3.5-beta-000390
1.3.5-beta-000391
1.3.5-beta-000393
1.3.6
1.3.6-beta-000395
1.3.7
1.3.7-beta-000398
1.3.7-beta-000403
1.3.8
1.3.8-beta-000406
1.3.8-beta-000407
1.3.8-beta-000408
1.3.8-beta-000409
1.3.8-beta-000410
1.3.8-beta-000412
1.3.9
1.3.9-beta-000414
1.3.9-beta-000415
1.3.9-beta-000416
1.3.9-beta-000417
1.3.9-beta-000418
1.3.9-beta-000419
1.3.9-beta-000420
1.3.9-beta-000423
1.4.0
1.4.0-beta-000424
1.4.0-beta-000426
1.4.0-beta-000428
1.4.0-beta-000430
1.4.0-beta-000431
1.4.0-beta-000432
1.4.0-beta-000433
1.4.0-beta-000437
1.4.0-beta-000438
1.4.1
1.4.1-beta-000454
1.4.1-beta-000455
1.4.1-beta-000458
1.4.1-beta-000460
1.4.1-beta-000463
1.4.2
1.4.2-beta-000466
1.4.3
1.4.3-beta-000468
1.4.3-beta-000469
1.4.3-beta-000470
1.4.3-beta-000471
1.4.3-beta-000472
1.4.3-beta-000473
1.4.3-beta-000476
1.4.3-beta-000477
1.4.3-beta-000478
1.4.3-beta-000479
1.4.4-beta-000482
1.4.4-beta-000484
1.4.4-beta-000485
1.4.4-beta-000486
1.4.4-beta-000487
1.4.4-beta-000488
1.4.4-beta-000489
1.4.4-beta-000490
1.4.4-beta-000491
1.4.4-beta-000492
1.4.4-beta-000493
1.4.4-beta-000494
1.4.4-beta-000495
1.4.4-beta-000496
1.4.4-beta-000497
1.4.4-beta-000498
1.4.4-beta-000499
1.5.0
1.5.0-beta-000505
1.5.1
1.5.1-beta-000508
1.5.1-beta-000509
1.5.1-beta-000510
1.5.1-beta-000512
1.5.1-beta-000513
1.5.1-beta-000520
1.5.2
1.5.2-beta-000521
1.5.2-beta-000522
1.5.2-beta-000534
1.5.2-beta-000536
1.5.2-beta-000539
1.5.3
1.5.3-beta-000540
1.5.3-beta-000542
1.5.3-beta-000546
1.6.0
1.6.0-beta-000553
1.6.0-beta-000554
1.6.0-beta-000557
1.6.0-beta-000559
1.6.0-beta-000560
1.6.0-beta-000562
1.6.0-beta-000565
1.6.1
1.6.1-beta-000566
1.6.1-beta-000567
1.6.1-beta-000572
1.6.2
1.6.2-beta-000573
1.6.3
1.6.3-beta-000576
1.6.3-beta-000616
1.6.3-beta-000627
1.6.3-beta-000629
1.6.3-beta-000630
1.6.3-beta-000631
1.6.3-beta-000633
1.6.3-beta-000634
1.6.3-beta-000638
1.6.3-beta-000643
1.6.3-beta-000648
1.6.3-beta-000651
1.6.4
1.6.4-beta-000654
1.6.4-beta-000656
1.6.5
1.6.5-beta-000773
1.6.6
1.6.6-beta-000775
1.6.6-beta-000776
1.6.6-beta-000778
1.6.6-beta-000781
1.6.6-beta-000782
1.6.6-beta-000784
1.6.6-beta-000786
1.6.7
1.6.7-beta-000823
1.6.8
1.6.8-beta-000841
1.6.8-beta-000843
1.6.8-beta-000846
1.6.9-beta-000874
10.0.0
10.0.1
10.0.2-rc
10.1.0
10.1.0-rc
10.1.1
2.0.0
2.0.0-rc001
2.0.1
2.0.2
2.1.0
2.1.0-rc
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
8.0.0-beta-000646
9.0.0-beta-000584
9.0.0-beta-000611
9.0.0-beta-000617
Fixed in
10.1.2
References Updated Apr 24, 2024 · Source: OSV.dev |
1.6.3-beta-000616
pre
Dependencies (2)
|