Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-43377 EUVD-2024-2601GHSA-hrww-x3fq-xcvh

Umbraco CMS Improper Access Control vulnerability

Published Aug 20, 2024 · Updated Sep 3, 2024 · Assigned by GitHub_M

Description

Umbraco CMS is an ASP.NET CMS. An authenticated user can access a few unintended endpoints. This issue is fixed in 14.1.2.

Affected products

VendorProductAffectedFixed
umbraco Umbraco-CMS >= 14.0.0, < 14.1.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Umbraco.Cms >= 14.0.0, < 14.1.2 14.1.2 GHSA-hrww-x3fq-xcvh

References