Lucene search
GoogleOSV:CVE-2024-43376HistoryAug 20, 2024 - 3:15 p.m.
CVE-2024-43376
2024-08-2015:15:23
Google
osv.dev
2
umbraco
asp.net
cms
management api
stack trace
debug mode
vulnerability
fixed
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
4.5
Confidence
High
EPSS
0.001
Percentile
17.7%
Umbraco is an ASP.NET CMS. Some endpoints in the Management API can return stack trace information, even when Umbraco is not in debug mode. This vulnerability is fixed in 14.1.2.
Related
cvelist
cvelist
veracode
veracode
Information Disclosure
2024-08-21 05:48:38
cve
cve
CVE-2024-43376
2024-08-20 15:15:23
vulnrichment
vulnrichment
osv
osv
nvd
nvd
CVE-2024-43376
2024-08-20 15:15:23
github
github
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
4.5
Confidence
High
EPSS
0.001
Percentile
17.7%
Related for OSV:CVE-2024-43376