Skip to content
OpenAdvisories

Package · NuGet

Umbraco.Cms.Core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.1
    CVE-2024-29035

    Umbraco's Blind SSRF Leads to Port Scan by using Webhooks

    Umbraco is an ASP.NET CMS. Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical. This vulnerability is fixed in 13.1.1.

    umbraco Umbraco-CMS Umbraco.Cms.Web.BackOffice Umbraco.Cms.Core NuGet
  • High 8.6
    CVE-2022-22690

    Umbraco Remote ApplicationURL Overwrite

    Within the Umbraco CMS, a configuration element named "UmbracoApplicationUrl" (or just "ApplicationUrl") is used whenever application code needs to build a URL pointing back to the site. For example, when a user resets their password and the application build…

    umbraco Umbraco-CMS Umbraco.Cms.Core NuGet
  • Medium 6.8
    CVE-2022-22691

    Umbraco Password Reset URL Poison

    The password reset component deployed within Umbraco uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to Umbraco users when so that it points to the attackers server th…

    umbraco Umbraco-CMS Umbraco.Cms.Core NuGet