Executive brief
Umbraco CMS vulnerable to CSRF
Affected products
- NuGet Umbraco.Cms
Junglewise Threat Intelligence
CVE-2015-8814: Umbraco CMS vulnerable to CSRF
CVE-2015-8814 · Severity: low · CVSS 3 · Published 2022-05-17
Technologies: Umbraco.Cms (NuGet). Vendors: NuGet.
Related threats
- Umbraco CMS HTML injection in Backoffice confirmation dialog
- Umbraco CMS arbitrary file upload in PDF processing
- Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
- Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads
- Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API