Skip to content
OpenAdvisories

Package · NuGet

Umbraco.Cms.Core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.1
    CVE-2024-29035

    Umbraco's Blind SSRF Leads to Port Scan by using Webhooks

    Umbraco is an ASP.NET CMS. Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical. This vulnerability is fixed in 13.1.1.

    umbraco Umbraco-CMS Umbraco.Cms.Web.BackOffice Umbraco.Cms.Core NuGet
  • Medium 6.8
    CVE-2022-22691

    Umbraco Password Reset URL Poison

    The password reset component deployed within Umbraco uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to Umbraco users when so that it points to the attackers server th…

    umbraco Umbraco-CMS Umbraco.Cms.Core NuGet