Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2023/06/09 7:29 p.m.56 views

CVE-2023-32312 Client secret not mandatory in UmbracoIdentityExtensions

UmbracoIdentityExtensions is an Umbraco add-on package that enables easy extensibility points for ASP.Net Identity integration. In affected versions client secrets are not required which may expose some endpoints to untrusted actors. Since Umbraco is not a single-page application, the implicit fl...

3.7CVSS5.6AI score0.00625EPSS
SaveExploits0References4
Rows per page
Query Builder