CVE-2022-22690

CVE-2022-22690 is a high-severity vulnerability affecting Umbraco CMS versions prior to 9.2.0. It allows an unauthenticated attacker to manipulate the "UmbracoApplicationUrl" configuration element, which is used to construct URLs within the application. By altering this value, an attacker can redirect users to a malicious server, potentially leading to account takeover through interception of sensitive data like password reset tokens. The CVSS score is 7.5, indicating a high impact on integrity with low attack complexity and no user interaction required. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.