Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:28 a.m.16 views

CVE-2023-49278

Umbraco is an ASP.NET content management system CMS. Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a brute force exploit can be used to collect valid usernames. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue...

5.3CVSS6.7AI score0.005EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/12 7:14 p.m.48 views

CVE-2023-49278

CVE-2023-49278 — Umbraco CMS brute-force username disclosure . Umbraco is an ASP.NET CMS. The vulnerability affects versions starting from 8.0.0 up to but not including the patched releases: 8.18.10, 10.8.1, and 12.3.4. A brute-force method can be used to collect valid usernames, enabling potenti...

5.3CVSS5.1AI score0.005EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/12 7:14 p.m.21 views

CVE-2023-49278 Umbraco CMS brute force exploit can be used to collect valid usernames

Umbraco is an ASP.NET content management system CMS. Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a brute force exploit can be used to collect valid usernames. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue...

5.3CVSS7AI score0.005EPSS
SaveExploits0References1
Rows per page
Query Builder