Umbraco CMS contains a server-side request forgery vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-47776 · ADVISORY
• umbraco/Umbraco-CMS · PACKAGE
• our.umbraco.com · WEB
• releases.umbraco.com/all-releases · WEB
• exploit-db.com/exploits/50462 · WEB
• our.umbraco.com · Product

UmbracoCms のその他の脆弱性

• CVE-2024-48927中 4.6Umbraco, a free and open source .NET content management system, has a remote code execution issue in versions on the 13.x branch prior to 13…
• CVE-2020-5811中 6.5An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in a…
• CVE-2020-29454中 4.3Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings …
• CVE-2020-9472中 6.5Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality.