CVE-2024-34071
2 advisories.
NuGet/UmbracoCms.Core CVE-2024-34071: medium 6.1
Umbraco CMS Open Redirect Bypass Protection
Action: Upgrade UmbracoCms.Core to 8.18.14 (8.x), 10.8.6 (10.x), 12.3.10 (12.x) or 13.3.1 (13.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.18.5 | 8.18.14 | - |
| 10.5.0 | 10.8.6 | - |
| 12.0.0 | 12.3.10 | - |
| 13.0.0 | 13.3.1 | - |
Fixed versions
| 8.18.14 | 10.8.6 | 12.3.10 | 13.3.1 |
Sources
- osv: GHSA-j74q-mv2c-rxmp
- https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-j74q-mv2c-rxmp
- https://nvd.nist.gov/vuln/detail/CVE-2024-34071
- https://github.com/umbraco/Umbraco-CMS/commit/5f24de308584b9771240a6db1a34630a5114c450
- https://github.com/umbraco/Umbraco-CMS/commit/c17d4e1a600098ec524e4126f4395255476bc33f
- https://github.com/umbraco/Umbraco-CMS/commit/c8f71af646171074c13e5c34f74312def4512031
- https://github.com/umbraco/Umbraco-CMS/commit/d8df405db4ea884bb4b96f088d10d9a2070cf024
- https://github.com/umbraco/Umbraco-CMS
CVE-2024-34071 · published · modified · JSON
NuGet/Umbraco.Cms.Web.BackOffice CVE-2024-34071: medium 6.1
Umbraco CMS Open Redirect Bypass Protection
Action: Upgrade Umbraco.Cms.Web.BackOffice to 8.18.14 (8.x), 10.8.6 (10.x), 12.3.10 (12.x) or 13.3.1 (13.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.18.5 | 8.18.14 | - |
| 10.5.0 | 10.8.6 | - |
| 12.0.0 | 12.3.10 | - |
| 13.0.0 | 13.3.1 | - |
Fixed versions
| 8.18.14 | 10.8.6 | 12.3.10 | 13.3.1 |
Sources
- osv: GHSA-j74q-mv2c-rxmp#NuGet/Umbraco.Cms.Web.BackOffice
- https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-j74q-mv2c-rxmp
- https://nvd.nist.gov/vuln/detail/CVE-2024-34071
- https://github.com/umbraco/Umbraco-CMS/commit/5f24de308584b9771240a6db1a34630a5114c450
- https://github.com/umbraco/Umbraco-CMS/commit/c17d4e1a600098ec524e4126f4395255476bc33f
- https://github.com/umbraco/Umbraco-CMS/commit/c8f71af646171074c13e5c34f74312def4512031
- https://github.com/umbraco/Umbraco-CMS/commit/d8df405db4ea884bb4b96f088d10d9a2070cf024
- https://github.com/umbraco/Umbraco-CMS
CVE-2024-34071 · published · modified · JSON