Product
Umbraco CMS contains an authentication bypass vulnerability involving Host header poisoning that allows unauthenticated attackers to hijack back-office sessions and execute code via Razor templates.