NuGet/Umbraco.Cms.StaticAssets CVE-2024-47819: medium 4.2, EPSS 0.35%
Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section
Action: Upgrade Umbraco.Cms.StaticAssets to 14.3.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 14.0.0 | 14.3.1 | - |
Fixed versions
| 14.3.1 |
Sources
- osv: GHSA-c5g6-6xf7-qxp3#NuGet/Umbraco.Cms.StaticAssets
- https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-c5g6-6xf7-qxp3
- https://nvd.nist.gov/vuln/detail/CVE-2024-47819
- https://github.com/umbraco/Umbraco-CMS
CVE-2024-47819 · published · modified · JSON