Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/01/16 4:20 p.m.•13 views

CVE-2021-47776

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and...

6.9CVSS6.9AI score0.00386EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/15 6:31 p.m.•16 views

GHSA-H66J-XM43-47PP Umbraco CMS contains a server-side request forgery vulnerability

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and...

6.9CVSS6.9AI score0.00386EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2026/01/15 6:31 p.m.•23 views

Umbraco CMS contains a server-side request forgery vulnerability

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and...

6.9CVSS7AI score0.00386EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2026/01/15 3:52 p.m.•15 views

EUVD-2026-2753

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and...

6.9CVSS6.4AI score0.00386EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/01/15 3:52 p.m.•43 views

CVE-2021-47776 Umbraco v8.14.1 - 'baseUrl' SSRF

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and...

6.9CVSS0.00386EPSS
SaveExploits1References3
Rows per page
Query Builder