Skip to content
OpenAdvisories

Vendor

umbraco

52 known vulnerabilities.

Products

Umbraco-CMS 40 Umbraco.Forms.Issues 4 CMS 2 Forms 1 Umbraco.Engage.Forms 1 Umbraco.Workflow.Issues 1 UmbracoIdentityExtensions 1 Umbraco 1 Umbraco.Commerce.Issues 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-24011 Public exploit

    Umbraco CMS Vulnerable to User Enumeration Feasible Based On Management API Timing and Response Codes

    Umbraco is a free and open source .NET content management system. Starting in version 14.0.0 and prior to versions 14.3.2 and 15.1.2, it's possible to determine whether an account exists based on an analysis of response codes and timing of Umbraco management …

    umbraco Umbraco-CMS Umbraco.Cms NuGet