CVE-2024-43377

CVSS V2 None CVSS V3 None
Description
Umbraco CMS is an ASP.NET CMS. An authenticated user can access a few unintended endpoints. This issue is fixed in 14.1.2.
Overview
  • CVE ID
  • CVE-2024-43377
  • Assigner
  • GitHub_M
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-08-20T14:43:44.783Z
  • Last Modified Date
  • 2024-08-20T14:43:44.783Z
Weakness Enumerations
CWE URL
CWE-284 http://cwe.mitre.org/data/definitions/284.html
References
Reference URL Reference Tags
https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-hrww-x3fq-xcvh x_refsource_CONFIRM
https://github.com/umbraco/Umbraco-CMS/commit/72bef8861d94a39d5cc9530a04c4797b91fcbecf x_refsource_MISC
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-43377
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43377
History
Created Old Value New Value Data Type Notes
2024-08-21 13:20:15 Added to TrackCVE