Lucene search
HistoryAug 20, 2024 - 3:15 p.m.
CVE-2024-43376
umbraco
management api
vulnerability
non-debug mode
asp.net cms
stack trace
fixed
14.1.2
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
17.7%
Umbraco is an ASP.NET CMS. Some endpoints in the Management API can return stack trace information, even when Umbraco is not in debug mode. This vulnerability is fixed in 14.1.2.
Affected configurations
Node
umbracoumbraco_cmsRange14.0.0–14.1.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| umbraco | umbraco_cms | * | cpe:2.3:a:umbraco:umbraco_cms:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
osv
osv
CVE-2024-43376
2024-08-20 15:15:23
veracode
veracode
Information Disclosure
2024-08-21 05:48:38
cve
cve
CVE-2024-43376
2024-08-20 15:15:23
github
github
vulnrichment
vulnrichment
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
17.7%
Related for NVD:CVE-2024-43376