Executive brief
Umbraco CMS Improper Access Control vulnerability
Affected products
- NuGet Umbraco.Cms
Junglewise Threat Intelligence
CVE-2024-43377: Umbraco CMS Improper Access Control vulnerability
CVE-2024-43377 · Severity: low · CVSS 3.1 · Published 2024-08-20
Technologies: Umbraco.Cms (NuGet). Vendors: NuGet.
Related threats
- Umbraco CMS HTML injection in Backoffice confirmation dialog
- Umbraco CMS arbitrary file upload in PDF processing
- Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
- Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads
- Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API