Skip to content
OpenAdvisories

Package · NuGet

Umbraco.Cms.Api.Management

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-27601

    Umbraco Allows Improper API Access Control to Low-Privilege Users to Data Type Functionality

    Umbraco is a free and open source .NET content management system. An improper API access control issue has been identified Umbraco's API management package prior to versions 15.2.3 and 14.3.3, allowing low-privilege, authenticated users to create and update d…

    umbraco Umbraco-CMS Umbraco.Cms.Api.Management NuGet
  • Medium 4.3
    CVE-2024-43376

    Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information

    Umbraco is an ASP.NET CMS. Some endpoints in the Management API can return stack trace information, even when Umbraco is not in debug mode. This vulnerability is fixed in 14.1.2.

    umbraco Umbraco-CMS Umbraco.Cms.Api.Management NuGet