Skip to content
OpenAdvisories

Product · umbraco

UmbracoIdentityExtensions

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2023-32312

    Client secret not mandatory in UmbracoIdentityExtensions

    UmbracoIdentityExtensions is an Umbraco add-on package that enables easy extensibility points for ASP.Net Identity integration. In affected versions client secrets are not required which may expose some endpoints to untrusted actors. Since Umbraco is not a si…

    umbraco UmbracoIdentityExtensions