Security Advisory

CVE-2019-25137

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-05-18 00:00:00
Last updated 2025-01-22 16:43:41
Assigner mitre
State PUBLISHED

Description

Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:script in an xsltSelection to developer/Xslt/xsltVisualize.aspx.