Upgrading Umbraco.Cms.Web.BackOffice 10 to 11
Unknown10.8.11 → 11.5.0Security1
SecurityHigh · CVSS 7.5Umbraco allows possible Admin-level access to backoffice without Auth under rare conditionsGHSA-h8wc-r4jh-mg7m · CVE-2023-37267 ↗
UnknownUpgrade verdict
DepDelta hasn't looked for this range's notes yet, so breaking changes can't be ruled out.
In plain terms
- DepDelta hasn't finished looking for the notes in this range, so it can't rule out breaking changes yet.
- Their commits are listed with this comparison.
Must act 1 item needs code or config changes
Target frameworks requirement changed in 11.0.0-rc1: net6.0 → net7.0.
What you must change
Security1
Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions
High · CVSS 7.5