CVE-2024-29035
Umbraco's Blind SSRF Leads to Port Scan by using Webhooks
概要
Umbraco's Blind SSRF Leads to Port Scan by using Webhooks
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Umbraco is an ASP.NET CMS. Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical. This vulnerability is fixed in 13.1.1.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com