CVE-2024-29035
Umbraco's Blind SSRF Leads to Port Scan by using Webhooks
Résumé
Umbraco's Blind SSRF Leads to Port Scan by using Webhooks
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Umbraco is an ASP.NET CMS. Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical. This vulnerability is fixed in 13.1.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com