Privilege Escalation

2020-12-0305:01:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

22.9%

JSON

umbracocms is vulnerable to privilege escalation. A user without Applications.Settings access is able to visit a logviewer endpoint due to incorrect access control in Editors/LogViewerController.cs.

CPENameOperatorVersion
umbracocms.weble8.9.1

CPE	Name	Operator	Version
	umbracocms.web	le	8.9.1

References

github.com/umbraco/Umbraco-CMS/commit/7701a0f745878896658166fd047b25136387893f

github.com/umbraco/Umbraco-CMS/pull/9361

0.001 Low

EPSS

Percentile

22.9%

JSON

Related for VERACODE:28034