-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from two primary issues: (1) Improper query string parsing in authorization handlers (Content/MediaPermissionsQueryStringHandler) that allowed multiple 'id' parameters to bypass checks, and (2) Missing [HttpPost] attributes on controller endpoints, enabling GET request exploitation. The TryParseNodeId method in PermissionsQueryStringHandler.cs was vulnerable because it resolved GUIDs without object-type filtering, allowing cross-type ID resolution. The commit patches explicitly set KeyParsingFilterType (Document/Media) and enforce [HttpPost] on endpoints, confirming these as root causes.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Umbraco.Cms.Web.Backoffice | nuget | <= 10.8.8 | 10.8.9 |
| Umbraco.Cms.Web.Backoffice | nuget | >= 11.0.0-rc1, <= 13.7.0 | 13.7.1 |