{"id":"CVE-2024-48927","aliases":["EUVD-2024-2947","GHSA-5955-cwv4-h7qh"],"status":"published","title":"Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice","description":"Umbraco, a free and open source .NET content management system, has a remote code execution issue in versions on the 13.x branch prior to 13.5.2, 10.x prior to 10.8.7, and 8.x prior to 8.18.15. There is a potential risk of code execution for Backoffice users when they “preview” SVG files in full screen mode. Versions 13.5.2, 10.8,7, and 8.18.15 contain a patch for the issue. As a workaround, derver-side file validation is available to strip script tags from file's content during the file upload process.","severity":{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00467,"percentile":0.40721,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-74","CWE-79"],"published":"2024-10-22T15:50:46Z","modified":"2026-10-28T02:30:44Z","fixes":[{"ecosystem":"NuGet","package":"UmbracoCms","fixed_in":["8.18.15"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Umbraco.Cms","fixed_in":["10.8.7","13.5.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"NuGet","package":"UmbracoCms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.18.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Umbraco.Cms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0"},{"fixed":"10.8.7"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Umbraco.Cms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"13.5.2"}]}]},{"source":"osv","ecosystem":"NuGet","package":"UmbracoCms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.18.15"}]}],"versions":["8.0.0","8.0.1","8.0.2","8.0.3","8.1.0","8.1.1","8.1.2","8.1.3","8.1.4","8.1.5","8.1.6","8.10.0","8.10.0-rc","8.10.1","8.10.2","8.10.3","8.11.0","8.11.0-rc","8.11.1","8.11.2","8.11.3","8.12.0","8.12.0-rc","8.12.1","8.12.2","8.12.3","8.13.0","8.13.0-rc","8.13.1","8.14.0","8.14.0-rc","8.14.1","8.14.2","8.14.3","8.14.4","8.15.0","8.15.0-rc","8.15.1","8.15.2","8.15.3","8.16.0","8.16.0-rc","8.17.0","8.17.0-rc","8.17.0-rc2","8.17.1","8.17.2","8.18.0","8.18.0-rc","8.18.0-rc2","8.18.1","8.18.10","8.18.11","8.18.12","8.18.13","8.18.14","8.18.2","8.18.3","8.18.4","8.18.5","8.18.6","8.18.7","8.18.8","8.18.9","8.2.0","8.2.0-rc","8.2.1","8.2.2","8.2.3","8.3.0","8.3.1","8.4.0","8.4.0-rc","8.4.1","8.4.2","8.5.0","8.5.1","8.5.2","8.5.3","8.5.4","8.5.5","8.6.0","8.6.0-rc","8.6.1","8.6.2","8.6.3","8.6.4","8.6.5","8.6.6","8.6.7","8.6.8","8.7.0","8.7.0-rc","8.7.1","8.7.2","8.7.3","8.8.0","8.8.0-rc","8.8.1","8.8.2","8.8.3","8.8.4","8.9.0","8.9.0-rc","8.9.1","8.9.2","8.9.3"]},{"source":"osv","ecosystem":"NuGet","package":"Umbraco.Cms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0"},{"fixed":"10.8.7"}]}],"versions":["10.0.0","10.0.1","10.1.0","10.1.0-rc","10.1.0-rc2","10.1.1","10.2.0","10.2.0-rc","10.2.1","10.3.0","10.3.0-rc","10.3.1","10.3.2","10.4.0","10.4.0-rc","10.4.1","10.4.2","10.5.0","10.5.0-rc","10.5.1","10.6.0","10.6.0-rc","10.6.1","10.7.0","10.7.0-rc","10.8.0","10.8.0-rc","10.8.1","10.8.2","10.8.3","10.8.4","10.8.5","10.8.6"]},{"source":"osv","ecosystem":"NuGet","package":"Umbraco.Cms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"13.5.2"}]}],"versions":["13.0.0","13.0.1","13.0.2","13.0.3","13.1.0","13.1.0-rc","13.1.1","13.2.0","13.2.0-rc","13.2.1","13.2.2","13.3.0","13.3.0-rc","13.3.1","13.3.2","13.4.0","13.4.0-rc","13.4.0-rc2","13.4.1","13.5.0","13.5.0-rc","13.5.1"]}],"products":[{"vendor":"umbraco","product":"umbraco-cms"},{"vendor":"umbraco","product":"umbraco_cms"}],"references":[{"url":"https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-5955-cwv4-h7qh","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-48927","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-5955-cwv4-h7qh"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/48xxx/CVE-2024-48927.json","tags":["advisory"]},{"url":"https://github.com/umbraco/Umbraco-CMS","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2024-48927","title":"Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice","description":"Umbraco, a free and open source .NET content management system, has a remote code execution issue in versions on the 13.x branch prior to 13.5.2, 10.x prior to 10.8.7, and 8.x prior to 8.18.15. There is a potential risk of code execution for Backoffice users when they “preview” SVG files in full screen mode. Versions 13.5.2, 10.8,7, and 8.18.15 contain a patch for the issue. As a workaround, derver-side file validation is available to strip script tags from file's content during the file upload process.","status":"published","published":"2024-10-22T15:50:46.892Z","modified":"2024-10-22T16:07:12.486Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:34:11.638716Z"}],"euvd":[{"id":"EUVD-2024-2947","description":"Umbraco, a free and open source .NET content management system, has a remote code execution issue in versions on the 13.x branch prior to 13.5.2, 10.x prior to 10.8.7, and 8.x prior to 8.18.15. There is a potential risk of code execution for Backoffice users when they “preview” SVG files in full screen mode. Versions 13.5.2, 10.8,7, and 8.18.15 contain a patch for the issue. As a workaround, derver-side file validation is available to strip script tags from file's content during the file upload process.","status":"published","published":"2024-10-22T15:50:46Z","modified":"2024-10-22T16:07:12Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:05:22.720016Z"}],"ghsa":[{"id":"GHSA-5955-cwv4-h7qh","title":"Umbraco has a Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice","description":"### Impact\nThere is a potential risk of code execution for Backoffice users when they “preview” SVG files in full screen mode.\n\n### Workarounds\nServer-side file validation is available to strip script tags from file's content during the file upload process.\n\n","status":"published","published":"2024-10-22T18:12:38Z","modified":"2024-10-22T19:22:31Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:38:12.325695Z"}],"nvd":[{"id":"CVE-2024-48927","description":"Umbraco, a free and open source .NET content management system, has a remote code execution issue in versions on the 13.x branch prior to 13.5.2, 10.x prior to 10.8.7, and 8.x prior to 8.18.15. There is a potential risk of code execution for Backoffice users when they “preview” SVG files in full screen mode. Versions 13.5.2, 10.8,7, and 8.18.15 contain a patch for the issue. As a workaround, derver-side file validation is available to strip script tags from file's content during the file upload process.","status":"published","published":"2024-10-22T16:15:08.36Z","modified":"2026-06-17T07:59:04.093Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-74","CWE-79"],"updated_at":"2026-11-02T14:10:33.928543Z"}],"osv":[{"id":"CVE-2024-48927","title":"Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice","description":"Umbraco, a free and open source .NET content management system, has a remote code execution issue in versions on the 13.x branch prior to 13.5.2, 10.x prior to 10.8.7, and 8.x prior to 8.18.15. There is a potential risk of code execution for Backoffice users when they “preview” SVG files in full screen mode. Versions 13.5.2, 10.8,7, and 8.18.15 contain a patch for the issue. As a workaround, derver-side file validation is available to strip script tags from file's content during the file upload process.","status":"published","published":"2024-10-22T15:50:46.892Z","modified":"2026-10-28T02:30:44.860637217Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T15:44:43.597758Z"},{"id":"GHSA-5955-cwv4-h7qh","title":"Umbraco has a Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice","description":"### Impact\nThere is a potential risk of code execution for Backoffice users when they “preview” SVG files in full screen mode.\n\n### Workarounds\nServer-side file validation is available to strip script tags from file's content during the file upload process.\n\n","status":"published","published":"2024-10-22T18:12:38Z","modified":"2024-10-22T19:33:43.446221Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T15:46:38.213481Z"}]}}