CVE-2023-48313

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-48313
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-48313.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-48313
Aliases
Published
2023-12-12T17:23:49.092Z
Modified
2025-11-29T15:03:12.301664Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
Summary
Umbraco contains a DOM-XSS
Details

Umbraco is an ASP.NET content management system (CMS). Starting in 10.0.0 and prior to versions 10.8.1 and 12.3.4, Umbraco contains a cross-site scripting (XSS) vulnerability enabling attackers to bring malicious content into a website or application. Versions 10.8.1 and 12.3.4 contain a patch for this issue.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/48xxx/CVE-2023-48313.json"
}
References

Affected packages

Git / github.com/umbraco/umbraco-cms

Affected ranges

Type
GIT
Repo
https://github.com/umbraco/umbraco-cms
Events
Introduced
e3f4b86f1c28e0ec30a1ad2a079e308af4cbfbf7
Fixed
4a7ad4a562e7f07641d4a33cd246509f4ab59cd8
Database specific 
{
    "versions": [
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.8.1"
        }
    ]
}
Type
GIT
Repo
https://github.com/umbraco/umbraco-cms
Events
Introduced
38712dce16aa9412af3d81d4884bfc6e5533e019
Fixed
5dfa76600a9bd673888ff7f2a6ac5c87297cb981
Database specific 
{
    "versions": [
        {
            "introduced": "11.0.0-rc1"
        },
        {
            "fixed": "12.3.4"
        }
    ]
}

Affected versions

release-10.*

release-10.0.0
release-10.0.1
release-10.1.0
release-10.1.0-rc
release-10.1.0-rc2
release-10.2.0
release-10.2.0-rc
release-10.2.1
release-10.3.0
release-10.3.0-rc
release-10.3.1
release-10.3.2
release-10.4.0-rc1
release-10.4.1
release-10.5.0
release-10.5.0-rc
release-10.6.0
release-10.6.0-rc
release-10.6.1
release-10.7.0
release-10.7.0-rc
release-10.8.0
release-10.8.0-rc
release-10.8.1

release-11.*

release-11.0.0-rc1