Lucene search
PRIOn knowledge basePRION:CVE-2023-49273HistoryDec 12, 2023 - 7:15 p.m.
Information disclosure
2023-12-1219:15:00
PRIOn knowledge base
www.prio-n.com
3
umbraco
asp.net
cms
information disclosure
privileges
endpoints
patch
Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, users with low privileges (Editor, etc.) are able to access some unintended endpoints. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| umbraco_cms | ge | 12.0.0 | |
| umbraco_cms | lt | 12.3.4 | |
| umbraco_cms | ge | 10.0.0 | |
| umbraco_cms | lt | 10.8.1 | |
| umbraco_cms | ge | 8.0.0 | |
| umbraco_cms | lt | 8.18.10 |
Related
osv
osv
CVE-2023-49273
2023-12-12 19:15:08
Privilege Escalation using Spoofing
2023-12-13 13:25:38
nvd
nvd
CVE-2023-49273
2023-12-12 19:15:08
cve
cve
CVE-2023-49273
2023-12-12 19:15:08
cvelist
cvelist
CVE-2023-49273 Umbraco CMS vulnerable to Privilege Escalation using Spoofing
2023-12-12 19:05:39
veracode
veracode
Privilege Escalation
2023-12-16 12:23:13
github
github
Privilege Escalation using Spoofing
2023-12-13 13:25:38