Security Improvement

Found in

EPiServer.CMS.UI 11.32.1

Fixed in

EPiServer.CMS.UI 11.37.2

(Or a related package)

Created

Apr 11, 2024

Updated

May 07, 2024

Area

CMS UI

State

Closed, Fixed and tested

Description

Updated the packages Microsoft.AspNet.Identity.Owin and Microsoft.AspNet.Identity.Owin to version 2.2.4 since version 2.2.3 was flagged for security vulnerabilities.

Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability