Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2026/01/16 4:20 p.m.1 views

CVE-2021-47776

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and...

6.9CVSS6.9AI score0.00017EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2026/01/15 6:31 p.m.9 views

Umbraco CMS contains a server-side request forgery vulnerability

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and...

6.9CVSS7AI score0.00017EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2026/01/15 6:31 p.m.2 views

GHSA-H66J-XM43-47PP Umbraco CMS contains a server-side request forgery vulnerability

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and...

6.9CVSS6.9AI score0.00017EPSS
Exploits1References5
EUVD
EUVD
added 2026/01/15 3:52 p.m.3 views

EUVD-2026-2753

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and...

6.9CVSS6.4AI score0.00017EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/15 3:52 p.m.24 views

CVE-2021-47776 Umbraco v8.14.1 - 'baseUrl' SSRF

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and...

6.9CVSS0.00017EPSS
Exploits1References3
Rows per page
Query Builder