Lucene search
PRIOn knowledge basePRION:CVE-2023-49274HistoryDec 12, 2023 - 8:15 p.m.
Default credentials
2023-12-1220:15:00
PRIOn knowledge base
www.prio-n.com
7
default credentials
umbraco cms
user enumeration
smtp
reset password
vulnerability
security patch
Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a user enumeration attack is possible when SMTP is not set up correctly, but reset password is enabled. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| umbraco_cms | ge | 12.0.0 | |
| umbraco_cms | lt | 12.3.4 | |
| umbraco_cms | ge | 10.0.0 | |
| umbraco_cms | lt | 10.8.1 | |
| umbraco_cms | ge | 8.0.0 | |
| umbraco_cms | lt | 8.18.10 |
Related
osv
osv
CVE-2023-49274
2023-12-12 20:15:07
cve
cve
CVE-2023-49274
2023-12-12 20:15:07
github
github
cvelist
cvelist
nvd
nvd
CVE-2023-49274
2023-12-12 20:15:07
veracode
veracode
Information Exposure
2023-12-13 11:20:24