CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

13 matches found

OSV•added 2026/04/10 7:40 p.m.•2 views

GHSA-CP79-9MWR-WR49 Ech0: Missing authorization on dashboard log endpoints allows low-privilege users to access sensitive system logs

Summary Ech0 allows any authenticated user to read historical system logs and subscribe to live log streams because the dashboard log endpoints validate only that a JWT is present and valid, but do not require an administrator role or privileged scope. Impact Any valid user session can access GET...

6.5CVSS5.8AI score

Exploits0References3

RedhatCVE•added 2026/03/08 1:44 a.m.•5 views

CVE-2026-30233

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authorization flaw in OliveTin allows authenticated users with view: false permission to enumerate action bindings and metadata via dashboard and API endpoints. Although execution exec may be...

6.5CVSS5.8AI score0.00417EPSS

Exploits1References1

Snyk•added 2026/03/05 9:24 p.m.•1 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the dashboard and API endpoints. An attacker can access sensitive action metadata, including titles, IDs, icons, and argument details, by sending crafted requests as an authenticated user with restricted view...

6.5CVSS5.8AI score0.00417EPSS

Exploits1References2

RedhatCVE•added 2026/01/16 4:20 p.m.•3 views

CVE-2021-47776

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and...

6.9CVSS6.9AI score0.00343EPSS

Exploits1References1

Github Security Blog•added 2026/01/15 6:31 p.m.•13 views

Umbraco CMS contains a server-side request forgery vulnerability

6.9CVSS7AI score0.00343EPSS

Exploits1References5Affected Software1

OSV•added 2026/01/15 6:31 p.m.•4 views

GHSA-H66J-XM43-47PP Umbraco CMS contains a server-side request forgery vulnerability

6.9CVSS6.9AI score0.00343EPSS

Exploits1References5

OSV•added 2026/01/15 4:16 p.m.•5 views

CVE-2021-47776

5.3CVSS5.5AI score

Exploits0References3

CVE•added 2026/01/15 3:52 p.m.•6 views

CVE-2021-47776

Umbraco CMS v8.14.1 is affected by a server-side request forgery due to improper validation of the baseUrl parameter in dashboard and help endpoints. The vulnerability enables an attacker to force the server to perform unauthorized requests to external hosts via the GetContextHelpForPage, GetRemo...

6.9CVSS6.5AI score0.00343EPSS

Exploits1References3Affected Software1