What's Changed
🔒 Security
- Resolved incorrect authorization lets Content-only backoffice users modify Templates, enabling remote code execution from GHSA-f7m5-5x7g-2p52
- Resolved insufficient authorization on Management API search endpoints from GHSA-w5q3-9wf8-43gg
🐛 Bug Fixes
- Routing: Don't retain the fallback default culture captured during an upgrade boot (closes #22581) by @AndyButland in #23653
Full Changelog: release-17.6.1...release-17.6.2