Skip to content
CVE PROGRAM SOURCE RECORD4.1 Medium

CVE-2024-29035

Umbraco's Blind SSRF Leads to Port Scan by using Webhooks

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Umbraco is an ASP.NET CMS. Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical. This vulnerability is fixed in 13.1.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

umbraco Umbraco-CMS

  • >= 13.0.0 , <13.1.1affected

References