CVE-2024-29035
Umbraco's Blind SSRF Leads to Port Scan by using Webhooks
Summary
Umbraco's Blind SSRF Leads to Port Scan by using Webhooks
Original description
The description as published by the source.
Umbraco is an ASP.NET CMS. Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical. This vulnerability is fixed in 13.1.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com