Vulnerability Database

Published: Aug 20, 2024
Updated: Nov 16, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-43377" target="_blank" rel="noopener"> CVE-2024-43377
GHSA: <a href="https://github.com/advisories/GHSA-hrww-x3fq-xcvh" target="_blank" rel="noopener"> GHSA-hrww-x3fq-xcvh
Severity: Medium
Exploit:

308,681

Total vulnerabilities in the database

Umbraco CMS is an ASP.NET CMS. An authenticated user can access a few unintended endpoints. This issue is fixed in 14.1.2.

CVSS v3:

CWEs:

OWASP TOP 10:

Software	From	Fixed in
Umbraco.CMS	14.0.0	14.1.2
umbraco / umbraco_cms	14.0.0	14.1.2

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.