Executive brief
Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
Affected products
- NuGet Umbraco.Cms
Junglewise Threat Intelligence
CVE-2025-66625: Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
CVE-2025-66625 · Severity: low · CVSS 3.1 · Published 2025-12-09
Technologies: Umbraco.Cms (NuGet). Vendors: NuGet.
Related threats
- Umbraco CMS HTML injection in Backoffice confirmation dialog
- Umbraco CMS arbitrary file upload in PDF processing
- Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads
- Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API
- Umbraco CMS Improper Access Control vulnerability