CVE-2024-43376
Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information
Summary
Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information
Original description
The description as published by the source.
Umbraco is an ASP.NET CMS. Some endpoints in the Management API can return stack trace information, even when Umbraco is not in debug mode. This vulnerability is fixed in 14.1.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com