Umbraco.Cms vulnerabilities (NuGet)
16 vulnerabilities.
-
Umbraco.CmsNuGet Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree Picker expansion 8.7 High -
Umbraco.CmsNuGet Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog 4.6 Medium -
Umbraco.CmsNuGet Umbraco.Cms: Open Redirect Vulnerability in Surface Controllers 5.4 Medium -
Umbraco.CmsNuGet Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks 7.2 High -
Umbraco.CmsNuGet Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering 6.7 Medium -
Umbraco.CmsNuGet Umbraco Backoffice API Allows Unauthorized Modification of Domain Data 5.4 Medium -
Umbraco.CmsNuGet Umbraco CMS has an arbitrary file upload vulnerability 10.0 Critical -
Umbraco.CmsNuGet Umbraco Vulnerable to Improper File Access and Credential Exposure through Dictionary Import Functionality 4.9 Medium -
Umbraco.CmsNuGet Umbraco.Cms Vulnerable to Disclosure of Configured Password Requirements 5.3 Medium -
Umbraco.CmsNuGet Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads 5.5 Medium -
Umbraco.CmsNuGet Umbraco Makes User Enumeration Feasible Based on Timing of Login Response 5.3 Medium -
Umbraco.CmsNuGet Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users 8.8 High -
Umbraco.CmsNuGet Umbraco CMS Vulnerable to User Enumeration Feasible Based On Management API Timing and Response Codes 5.3 Medium -
Umbraco.CmsNuGet Umbraco CMS Dashboard frame cross site scripting 6.9 Medium -
Umbraco.CmsNuGet Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice 4.6 Medium -
Umbraco.CmsNuGet Umbraco CMS Improper Access Control vulnerability 5.4 Medium