Please report any vulnerabilities to [email protected]
Read more about Umbraco's security policies.
You can expect to hear back from us within 48 hours.
Security: umbraco/Umbraco-CMS
Security
.github/SECURITY.md
-
Stored XSS in the “dictionary name” on Dictionary sectionGHSA-c5g6-6xf7-qxp3 published
Oct 22, 2024 by bergmaniaModerate -
Improper Access Control Allows Low-Privilege Users to Access Webhook APIGHSA-4gp9-ff99-j6vj published
Oct 22, 2024 by bergmaniaLow -
Potential Code Execution Risk When Viewing SVG Files in Full Screen in BackofficeGHSA-5955-cwv4-h7qh published
Oct 22, 2024 by bergmaniaModerate -
Incomplete Server Termination During Explicit Sign-OutGHSA-wxw9-6pv9-c3xc published
Oct 22, 2024 by bergmaniaModerate -
Logout page displayed before session expirationGHSA-fp6q-gccw-7qqm published
Oct 22, 2024 by bergmaniaModerate -
Generation of Error Message Containing Sensitive InformationGHSA-77gj-crhp-3gvx published
Aug 20, 2024 by bergmaniaModerate -
Improper Access ControlGHSA-hrww-x3fq-xcvh published
Aug 20, 2024 by bergmaniaModerate -
Open Redirect Bypass ProtectionGHSA-j74q-mv2c-rxmp published
May 21, 2024 by bergmaniaModerate -
Possible user enumerationGHSA-552f-97wf-pmpq published
Mar 20, 2024 by bergmaniaLow -
Webhook logs viewable without Umbraco is in Debug modeGHSA-74p6-39f2-23v3 published
Apr 17, 2024 by netcamoModerate
Learn more about advisories related to umbraco/Umbraco-CMS in the GitHub Advisory Database