CVE-2022-22690

The CVE describes an Umbraco CMS issue where the configuration element UmbracoApplicationUrl/ApplicationUrl is used to construct URLs (e.g., password reset). For versions

CVE-2022-22690

Within the Umbraco CMS, a configuration element named "UmbracoApplicationUrl" or just "ApplicationUrl" is used whenever application code needs to build a URL pointing back to the site. For example, when a user resets their password and the application builds a password reset URL or when the...