Executive brief
Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API
Affected products
- NuGet Umbraco.Cms
Junglewise Threat Intelligence
CVE-2024-48925: Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API
CVE-2024-48925 · Severity: low · CVSS 3.1 · Published 2024-10-22
Technologies: Umbraco.Cms (NuGet). Vendors: NuGet.
Related threats
- Umbraco CMS HTML injection in Backoffice confirmation dialog
- Umbraco CMS arbitrary file upload in PDF processing
- Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
- Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads
- Umbraco CMS Improper Access Control vulnerability