Filtered by vendor Umbraco
Subscriptions
Total
37 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-9472 | 1 Umbraco | 1 Umbraco Cms | 2024-08-04 | 6.5 Medium |
| Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality. | ||||
| CVE-2020-9471 | 1 Umbraco | 1 Umbraco Cms | 2024-08-04 | 8.8 High |
| Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality. | ||||
| CVE-2020-7210 | 1 Umbraco | 1 Umbraco Cms | 2024-08-04 | 4.3 Medium |
| Umbraco CMS 8.2.2 allows CSRF to enable/disable or delete user accounts. | ||||
| CVE-2020-5811 | 1 Umbraco | 1 Umbraco Cms | 2024-08-04 | 6.5 Medium |
| An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in arbitrary files being written outside of the site home and expected paths when installing an Umbraco package. | ||||
| CVE-2020-5809 | 1 Umbraco | 1 Umbraco Cms | 2024-08-04 | 5.4 Medium |
| A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScript code into iframes when editing content using the TinyMCE rich-text editor, as TinyMCE is configured to allow iframes by default in Umbraco CMS. | ||||
| CVE-2020-5810 | 1 Umbraco | 1 Umbraco Cms | 2024-08-04 | 5.4 Medium |
| A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media can upload a malicious .svg file which act as a stored XSS payload. | ||||
| CVE-2021-37334 | 1 Umbraco | 1 Forms | 2024-08-04 | 9.8 Critical |
| Umbraco Forms version 4.0.0 up to and including 8.7.5 and below are vulnerable to a security flaw that could lead to a remote code execution attack and/or arbitrary file deletion. A vulnerability occurs because validation of the file extension is performed after the file has been stored in a temporary directory. By default, files are stored within the application directory structure at %BASEDIR%/APP_DATA/TEMP/FileUploads/. Whilst access to this directory is restricted by the root web.config file, it is possible to override this restriction by uploading another specially crafted web.config file to the temporary directory. It is possible to exploit this flaw to upload a malicious script file to execute arbitrary code and system commands on the server. | ||||
| CVE-2021-34254 | 1 Umbraco | 1 Umbraco Cms | 2024-08-04 | 6.1 Medium |
| Umbraco CMS before 7.15.7 is vulnerable to Open Redirection due to insufficient url sanitization on booting.aspx. | ||||
| CVE-2021-33224 | 1 Umbraco | 1 Umbraco Forms | 2024-08-03 | 9.8 Critical |
| File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file. | ||||
| CVE-2023-49273 | 1 Umbraco | 1 Umbraco Cms | 2024-08-02 | 5.4 Medium |
| Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, users with low privileges (Editor, etc.) are able to access some unintended endpoints. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue. | ||||
| CVE-2023-49274 | 1 Umbraco | 1 Umbraco Cms | 2024-08-02 | 3.7 Low |
| Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a user enumeration attack is possible when SMTP is not set up correctly, but reset password is enabled. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue. | ||||
| CVE-2023-49278 | 1 Umbraco | 1 Umbraco Cms | 2024-08-02 | 5.3 Medium |
| Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a brute force exploit can be used to collect valid usernames. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue. | ||||
| CVE-2023-49089 | 1 Umbraco | 1 Umbraco Cms | 2024-08-02 | 7.7 High |
| Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.0, Backoffice users with permissions to create packages can use path traversal and thereby write outside of the expected location. Versions 8.18.10, 10.8.1, and 12.3.0 contain a patch for this issue. | ||||
| CVE-2023-38694 | 1 Umbraco | 1 Umbraco Cms | 2024-08-02 | 3.5 Low |
| Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.7.0, and 12.1.0, a user with access to a specific part of the backoffice is able to inject HTML code into a form where it is not intended. Versions 8.18.10, 10.7.0, and 12.1.0 contain a patch for this issue. | ||||
| CVE-2023-37267 | 1 Umbraco | 1 Umbraco Cms | 2024-08-02 | 7.5 High |
| Umbraco is a ASP.NET CMS. Under rare conditions a restart of Umbraco can allow unauthorized users access to admin-level permissions. This vulnerability was patched in versions 10.6.1, 11.4.2 and 12.0.1. | ||||
| CVE-2023-32312 | 1 Umbraco | 1 Umbraco Identity Extensibility | 2024-08-02 | 3.7 Low |
| UmbracoIdentityExtensions is an Umbraco add-on package that enables easy extensibility points for ASP.Net Identity integration. In affected versions client secrets are not required which may expose some endpoints to untrusted actors. Since Umbraco is not a single-page application, the implicit flow is not safe. For traditional MVC applications, it is recommended to use the authorization code flow, which requires the client to authenticate with the authorization server using a client secret. This flow provides better security, as it involves exchanging an authorization code for an access token and/or ID token, rather than directly returning tokens in the URL fragment. This issue has been patched in commit `e792429f9` and a release to Nuget is pending. Users are advised to upgrade when possible. | ||||
| CVE-2024-29035 | 1 Umbraco | 1 Umbraco Cms | 2024-08-02 | 4.1 Medium |
| Umbraco is an ASP.NET CMS. Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical. This vulnerability is fixed in 13.1.1. | ||||