{"action":"Upgrade Umbraco.Cms to 14.1.2 or later.","affected":[{"fixed":"14.1.2","introduced":"14.0.0"}],"component":"Umbraco.Cms","cve_ids":["CVE-2024-43377"],"ecosystem":"NuGet","epss":0.00244,"exploited":false,"fixed_versions":["14.1.2"],"ghsa_id":"GHSA-hrww-x3fq-xcvh","id":"tcs_01M5N8RCTJCT5XJMPTAHY5HR3M","modified_at":"2024-09-17T16:36:12.492773Z","published_at":"2024-08-20T18:32:26Z","references":["https://osv.dev/vulnerability/GHSA-hrww-x3fq-xcvh","https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-hrww-x3fq-xcvh","https://nvd.nist.gov/vuln/detail/CVE-2024-43377","https://github.com/umbraco/Umbraco-CMS/commit/72bef8861d94a39d5cc9530a04c4797b91fcbecf","https://github.com/umbraco/Umbraco-CMS"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-hrww-x3fq-xcvh","url":"https://osv.dev/vulnerability/GHSA-hrww-x3fq-xcvh"}],"summary":"Umbraco CMS Improper Access Control vulnerability"}