CVE-2022-22691 - CVE House
Back to Database
Status published Medium CVE-2022-22691

Umbraco Password Reset URL Poison

Vulnerability Description

The password reset component deployed within Umbraco uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to Umbraco users when so that it points to the attackers server thereby disclosing the password reset token if/when the link is followed. A related vulnerability (CVE-2022-22690) could allow this flaw to become persistent so that all password reset URLs are affected persistently following a successful attack. See the AppCheck advisory for further information and associated caveats.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-22691

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • AppCheck Ltd

References

More from Umbraco

View All →
CVE-2025-68924
In Umbraco UmbracoForms through 8.13.16, an authenticated attacker can supply...
High 7.5
CVE-2024-10761
Umbraco CMS Dashboard frame cross site scripting
Medium 6.9
CVE-2022-22690
Umbraco Remote ApplicationURL Overwrite
High 8.6
CVE-2012-10054
Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE
Critical 9.3

Affected Vendor

Affected Software

Umbraco CMS
Vulnerable Versions:
unspecified

Timeline

Official Publish: January 18th, 2022
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Weaknesses (CWE)

CWE-640

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.