Lucene search
+L

Account Enumeration

🗓️ 13 May 2025 04:15:06Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 9 Views

Umbraco CMS has an Account enumeration vulnerability due to varied API response times post-login.

Related
Detection
Refs
Vulners
Node
OR
umbraco.cmsumbraco.cmsRange11.0.0-rc113.8.0csharp
umbraco.cmsumbraco.cmsRange9.0.0-rc00110.8.9csharp
umbraco.cmsumbraco.cmsMatch11.0.0csharp
umbraco.cmsumbraco.cmsMatch11.0.0-rc1csharp
umbraco.cmsumbraco.cmsMatch11.0.0-rc2csharp
umbraco.cmsumbraco.cmsMatch11.0.0-rc3csharp
umbraco.cmsumbraco.cmsMatch11.0.0-rc4csharp
umbraco.cmsumbraco.cmsMatch11.0.0-rc5csharp
umbraco.cmsumbraco.cmsMatch11.0.0-rc6csharp
umbraco.cmsumbraco.cmsMatch11.1.0csharp
umbraco.cmsumbraco.cmsMatch11.1.0-rccsharp
umbraco.cmsumbraco.cmsMatch11.2.0csharp
umbraco.cmsumbraco.cmsMatch11.2.0-rccsharp
umbraco.cmsumbraco.cmsMatch11.2.1csharp
umbraco.cmsumbraco.cmsMatch11.2.2csharp
umbraco.cmsumbraco.cmsMatch11.3.0csharp
umbraco.cmsumbraco.cmsMatch11.3.0-rccsharp
umbraco.cmsumbraco.cmsMatch11.3.1csharp
umbraco.cmsumbraco.cmsMatch11.4.0csharp
umbraco.cmsumbraco.cmsMatch11.4.0-rccsharp
umbraco.cmsumbraco.cmsMatch11.4.1csharp
umbraco.cmsumbraco.cmsMatch11.4.2csharp
umbraco.cmsumbraco.cmsMatch11.5.0csharp
umbraco.cmsumbraco.cmsMatch11.5.0-rccsharp
umbraco.cmsumbraco.cmsMatch12.0.0csharp
umbraco.cmsumbraco.cmsMatch12.0.0-rc1csharp
umbraco.cmsumbraco.cmsMatch12.0.0-rc2csharp
umbraco.cmsumbraco.cmsMatch12.0.0-rc3csharp
umbraco.cmsumbraco.cmsMatch12.0.0-rc4csharp
umbraco.cmsumbraco.cmsMatch12.0.0-rc5csharp
umbraco.cmsumbraco.cmsMatch12.0.1csharp
umbraco.cmsumbraco.cmsMatch12.1.0csharp
umbraco.cmsumbraco.cmsMatch12.1.0-rccsharp
umbraco.cmsumbraco.cmsMatch12.1.1csharp
umbraco.cmsumbraco.cmsMatch12.1.2csharp
umbraco.cmsumbraco.cmsMatch12.2.0csharp
umbraco.cmsumbraco.cmsMatch12.2.0-rccsharp
umbraco.cmsumbraco.cmsMatch12.3.0csharp
umbraco.cmsumbraco.cmsMatch12.3.0-rccsharp
umbraco.cmsumbraco.cmsMatch12.3.1csharp
umbraco.cmsumbraco.cmsMatch12.3.10csharp
umbraco.cmsumbraco.cmsMatch12.3.2csharp
umbraco.cmsumbraco.cmsMatch12.3.3csharp
umbraco.cmsumbraco.cmsMatch12.3.4csharp
umbraco.cmsumbraco.cmsMatch12.3.5csharp
umbraco.cmsumbraco.cmsMatch12.3.6csharp
umbraco.cmsumbraco.cmsMatch12.3.7csharp
umbraco.cmsumbraco.cmsMatch12.3.8csharp
umbraco.cmsumbraco.cmsMatch12.3.9csharp
umbraco.cmsumbraco.cmsMatch13.0.0csharp
umbraco.cmsumbraco.cmsMatch13.0.0-rc1csharp
umbraco.cmsumbraco.cmsMatch13.0.0-rc2csharp
umbraco.cmsumbraco.cmsMatch13.0.0-rc3csharp
umbraco.cmsumbraco.cmsMatch13.0.0-rc4csharp
umbraco.cmsumbraco.cmsMatch13.0.0-rc5csharp
umbraco.cmsumbraco.cmsMatch13.0.1csharp
umbraco.cmsumbraco.cmsMatch13.0.2csharp
umbraco.cmsumbraco.cmsMatch13.0.3csharp
umbraco.cmsumbraco.cmsMatch13.1.0csharp
umbraco.cmsumbraco.cmsMatch13.1.0-rccsharp
umbraco.cmsumbraco.cmsMatch13.1.1csharp
umbraco.cmsumbraco.cmsMatch13.2.0csharp
umbraco.cmsumbraco.cmsMatch13.2.0-rccsharp
umbraco.cmsumbraco.cmsMatch13.2.1csharp
umbraco.cmsumbraco.cmsMatch13.2.2csharp
umbraco.cmsumbraco.cmsMatch13.3.0csharp
umbraco.cmsumbraco.cmsMatch13.3.0-rccsharp
umbraco.cmsumbraco.cmsMatch13.3.1csharp
umbraco.cmsumbraco.cmsMatch13.3.2csharp
umbraco.cmsumbraco.cmsMatch13.4.0csharp
umbraco.cmsumbraco.cmsMatch13.4.0-rccsharp
umbraco.cmsumbraco.cmsMatch13.4.0-rc2csharp
umbraco.cmsumbraco.cmsMatch13.4.1csharp
umbraco.cmsumbraco.cmsMatch13.5.0csharp
umbraco.cmsumbraco.cmsMatch13.5.0-rccsharp
umbraco.cmsumbraco.cmsMatch13.5.1csharp
umbraco.cmsumbraco.cmsMatch13.5.2csharp
umbraco.cmsumbraco.cmsMatch13.5.3csharp
umbraco.cmsumbraco.cmsMatch13.6.0csharp
umbraco.cmsumbraco.cmsMatch13.6.0-rccsharp
umbraco.cmsumbraco.cmsMatch13.6.0-rc2csharp
umbraco.cmsumbraco.cmsMatch13.7.0csharp
umbraco.cmsumbraco.cmsMatch13.7.0-rccsharp
umbraco.cmsumbraco.cmsMatch13.7.1csharp
umbraco.cmsumbraco.cmsMatch13.7.2csharp
umbraco.cmsumbraco.cmsMatch13.8.0-rccsharp
umbraco.cmsumbraco.cmsMatch10.0.0csharp
umbraco.cmsumbraco.cmsMatch10.0.0-rc1csharp
umbraco.cmsumbraco.cmsMatch10.0.0-rc2csharp
umbraco.cmsumbraco.cmsMatch10.0.0-rc3csharp
umbraco.cmsumbraco.cmsMatch10.0.0-rc4csharp
umbraco.cmsumbraco.cmsMatch10.0.0-rc5csharp
umbraco.cmsumbraco.cmsMatch10.0.1csharp
umbraco.cmsumbraco.cmsMatch10.1.0csharp
umbraco.cmsumbraco.cmsMatch10.1.0-rccsharp
umbraco.cmsumbraco.cmsMatch10.1.0-rc2csharp
umbraco.cmsumbraco.cmsMatch10.1.1csharp
umbraco.cmsumbraco.cmsMatch10.2.0csharp
umbraco.cmsumbraco.cmsMatch10.2.0-rccsharp
umbraco.cmsumbraco.cmsMatch10.2.1csharp
umbraco.cmsumbraco.cmsMatch10.3.0csharp
umbraco.cmsumbraco.cmsMatch10.3.0-rccsharp
umbraco.cmsumbraco.cmsMatch10.3.1csharp
umbraco.cmsumbraco.cmsMatch10.3.2csharp
umbraco.cmsumbraco.cmsMatch10.4.0csharp
umbraco.cmsumbraco.cmsMatch10.4.0-rccsharp
umbraco.cmsumbraco.cmsMatch10.4.1csharp
umbraco.cmsumbraco.cmsMatch10.4.2csharp
umbraco.cmsumbraco.cmsMatch10.5.0csharp
umbraco.cmsumbraco.cmsMatch10.5.0-rccsharp
umbraco.cmsumbraco.cmsMatch10.5.1csharp
umbraco.cmsumbraco.cmsMatch10.6.0csharp
umbraco.cmsumbraco.cmsMatch10.6.0-rccsharp
umbraco.cmsumbraco.cmsMatch10.6.1csharp
umbraco.cmsumbraco.cmsMatch10.7.0csharp
umbraco.cmsumbraco.cmsMatch10.7.0-rccsharp
umbraco.cmsumbraco.cmsMatch10.8.0csharp
umbraco.cmsumbraco.cmsMatch10.8.0-rccsharp
umbraco.cmsumbraco.cmsMatch10.8.1csharp
umbraco.cmsumbraco.cmsMatch10.8.2csharp
umbraco.cmsumbraco.cmsMatch10.8.3csharp
umbraco.cmsumbraco.cmsMatch10.8.4csharp
umbraco.cmsumbraco.cmsMatch10.8.5csharp
umbraco.cmsumbraco.cmsMatch10.8.6csharp
umbraco.cmsumbraco.cmsMatch10.8.7csharp
umbraco.cmsumbraco.cmsMatch10.8.8csharp
umbraco.cmsumbraco.cmsMatch9.0.0csharp
umbraco.cmsumbraco.cmsMatch9.0.0-rc001csharp
umbraco.cmsumbraco.cmsMatch9.0.0-rc002csharp
umbraco.cmsumbraco.cmsMatch9.0.0-rc003csharp
umbraco.cmsumbraco.cmsMatch9.0.0-rc004csharp
umbraco.cmsumbraco.cmsMatch9.0.1csharp
umbraco.cmsumbraco.cmsMatch9.1.0csharp
umbraco.cmsumbraco.cmsMatch9.1.0-rccsharp
umbraco.cmsumbraco.cmsMatch9.1.1csharp
umbraco.cmsumbraco.cmsMatch9.1.2csharp
umbraco.cmsumbraco.cmsMatch9.2.0csharp
umbraco.cmsumbraco.cmsMatch9.2.0-rccsharp
umbraco.cmsumbraco.cmsMatch9.3.0csharp
umbraco.cmsumbraco.cmsMatch9.3.0-rccsharp
umbraco.cmsumbraco.cmsMatch9.3.1csharp
umbraco.cmsumbraco.cmsMatch9.4.0csharp
umbraco.cmsumbraco.cmsMatch9.4.0-rccsharp
umbraco.cmsumbraco.cmsMatch9.4.1csharp
umbraco.cmsumbraco.cmsMatch9.4.2csharp
umbraco.cmsumbraco.cmsMatch9.4.3csharp
umbraco.cmsumbraco.cmsMatch9.5.0csharp
umbraco.cmsumbraco.cmsMatch9.5.0-rccsharp
umbraco.cmsumbraco.cmsMatch9.5.0-rc2csharp
umbraco.cmsumbraco.cmsMatch9.5.0-rc3csharp
umbraco.cmsumbraco.cmsMatch9.5.1csharp
umbraco.cmsumbraco.cmsMatch9.5.2csharp
umbraco.cmsumbraco.cmsMatch9.5.3csharp
umbraco.cmsumbraco.cmsMatch9.5.4csharp

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Dec 2025 05:15Current
6.6Medium risk
Vulners AI Score6.6
CVSS 3.15.3
EPSS0.00318
SSVC
9