Skip to content
OpenAdvisories

Package · NuGet

UmbracoCms.Web

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2017-15280

    Umbraco CMS XXE Vulnerability

    XML external entity (XXE) vulnerability in Umbraco CMS before 7.7.3 allows attackers to obtain sensitive information by reading files on the server or sending TCP requests to intranet hosts (aka SSRF), related to Umbraco.Web/umbraco.presentation/umbraco/dialo…

    UmbracoCms.Web NuGet
  • Medium 5.4
    CVE-2017-15279

    Umbraco CMS vulnerable to stored XSS

    Cross-site scripting (XSS) vulnerability in Umbraco CMS before 7.7.3 allows remote attackers to inject arbitrary web script or HTML via the "page name" (aka nodename) parameter during the creation of a new page, related to Umbraco.Web.UI/umbraco/dialogs/Publi…

    UmbracoCms.Web NuGet