Lucene search
GoogleOSV:GHSA-4VP3-VFWW-8648HistoryApr 13, 2021 - 3:48 p.m.
Incorrect permission enforcement in UmbracoCms
2021-04-1315:48:05
Google
osv.dev
9
0.001 Low
EPSS
Percentile
22.9%
Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access.
| CPE | Name | Operator | Version |
|---|---|---|---|
| umbracocms | eq | 7.4.2 | |
| umbracocms | eq | 8.5.3 | |
| umbracocms | eq | 7.15.10 | |
| umbracocms | eq | 7.3.2 | |
| umbracocms | eq | 7.3.5 | |
| umbracocms | eq | 7.5.10 | |
| umbracocms | eq | 7.5.5 | |
| umbracocms | eq | 7.7.8 | |
| umbracocms | eq | 8.0.1 | |
| umbracocms | eq | 8.8.3 |
Related
cnvd
cnvd
Umbraco Improper Access Control Vulnerability
2020-12-02 00:00:00
cve
cve
CVE-2020-29454
2020-12-02 02:15:11
cvelist
cvelist
CVE-2020-29454
2020-12-02 01:50:03
prion
prion
Use after free
2020-12-02 02:15:00
github
github
Incorrect permission enforcement in UmbracoCms
2021-04-13 15:48:05
osv
osv
CVE-2020-29454
2020-12-02 02:15:11
veracode
veracode
Privilege Escalation
2020-12-03 05:01:25
nvd
nvd
CVE-2020-29454
2020-12-02 02:15:11