Medium
CVE-2024-43377
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41
Reset filters
Medium
CVE-2024-43376
Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information
Medium
CVE-2024-34071
Umbraco CMS Open Redirect Bypass Protection
Medium
CVE-2024-29035
Blind SSRF Leads to Port Scan by using Webhooks
Low
CVE-2023-49279
Stored XSS via SVG File Upload
Low
CVE-2023-49278
Brute force exploit can be used to collect valid usernames
Low
CVE-2023-49274
SMTP misconfiguration leading to "Forgot Password" exploit that leaks registered user email.
Medium
CVE-2023-49273
Privilege Escalation using Spoofing
Low
CVE-2023-49089
Using the directory back payload (“/../”) in a package name allows placement of package in other folders.
Medium
CVE-2023-48313
DOM-XSS on Backoffice login screen.
Low
CVE-2023-48227
Backoffice User can bypass "Publish" restriction
Low
CVE-2023-38694
Possible injection of HTML into user invite mails
High
CVE-2023-37267
Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions
High
CVE-2015-8814
Umbraco CMS vulnerable to CSRF
High
CVE-2015-8813
Umbraco CMS vulnerable to CSRF
High
CVE-2022-22691
Umbraco Persistent Password Reset Poison
High
CVE-2022-22690
Umbraco ApplicationURL Overwrite
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.