CVE-2024-43376
Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information
Résumé
Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Umbraco is an ASP.NET CMS. Some endpoints in the Management API can return stack trace information, even when Umbraco is not in debug mode. This vulnerability is fixed in 14.1.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com