All vulnerabilities

Servers and applications

CVE-2022-22690

Within the Umbraco CMS, a configuration element named "UmbracoApplicationUrl" (or just "ApplicationUrl") is used whenever application code needs to build a URL pointing back to the site. For example, when a user resets their password and the application builds a password reset URL or when the administrator invites users to the site. For Umbraco versions less than 9.2.0, if the Application URL is…

Severity
High 7.5
Published
18 Jan 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.2.0
Sources
NVD

Affected software

SoftwareAffected versions
Umbraco CMSServers and applications · cpe:a:umbraco:umbraco_cms
  • Every version before 9.2.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-22690
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-22690