A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More

Problem with custom Antiforgery header name

Found in

EPiServer.CMS.UI 12.26.0

Fixed in

EPiServer.CMS.UI 12.27.1

(Or a related package)

Created

Jan 04, 2024

Updated

Feb 27, 2024

Area

CMS UI

State

Closed, Fixed and tested


Description

Fixed an issue where the name of the form field or the header for the XSRF token could not be changed.