Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2024-34071

Umbraco is an ASP.NET CMS used by more than 730.000 websites. Umbraco has an endpoint that is vulnerable to open redirects. The endpoint is protected so it requires the user to be signed into backoffice before the vulnerable is exposed. This vulnerability has been patched in version(s) 8.18.14, 10.8.6, 12.3.10 and 13.3.1.

CVSS v3:

  • Severity: Unknown
  • Score:
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

Software From Fixed in
UmbracoCms.Core 8.18.5 8.18.14
UmbracoCms.Core 10.5.0 10.8.6
UmbracoCms.Core 12.0.0 12.3.10
UmbracoCms.Core 13.0.0 13.3.1
Umbraco.Cms.Web.BackOffice 8.18.5 8.18.14
Umbraco.Cms.Web.BackOffice 10.5.0 10.8.6
Umbraco.Cms.Web.BackOffice 12.0.0 12.3.10
Umbraco.Cms.Web.BackOffice 13.0.0 13.3.1
umbraco / umbraco_cms 13.0.0 13.3.1
umbraco / umbraco_cms 12.0.0 12.3.10
umbraco / umbraco_cms 10.5.0 10.8.6
umbraco / umbraco_cms 8.18.5 8.18.14