{"action":"Upgrade Umbraco.Cms.Web.BackOffice to 8.18.14 (8.x), 10.8.6 (10.x), 12.3.10 (12.x) or 13.3.1 (13.x) or later.","affected":[{"fixed":"8.18.14","introduced":"8.18.5"},{"fixed":"10.8.6","introduced":"10.5.0"},{"fixed":"12.3.10","introduced":"12.0.0"},{"fixed":"13.3.1","introduced":"13.0.0"}],"component":"Umbraco.Cms.Web.BackOffice","cve_ids":["CVE-2024-34071"],"ecosystem":"NuGet","epss":0.00375,"exploited":false,"fixed_versions":["8.18.14","10.8.6","12.3.10","13.3.1"],"ghsa_id":"GHSA-j74q-mv2c-rxmp","id":"tcs_01M5N8RQC8FSY729V0ZR8C6PK1","modified_at":"2026-09-10T03:49:23.703892796Z","published_at":"2024-05-21T14:29:18Z","references":["https://osv.dev/vulnerability/GHSA-j74q-mv2c-rxmp","https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-j74q-mv2c-rxmp","https://nvd.nist.gov/vuln/detail/CVE-2024-34071","https://github.com/umbraco/Umbraco-CMS/commit/5f24de308584b9771240a6db1a34630a5114c450","https://github.com/umbraco/Umbraco-CMS/commit/c17d4e1a600098ec524e4126f4395255476bc33f","https://github.com/umbraco/Umbraco-CMS/commit/c8f71af646171074c13e5c34f74312def4512031","https://github.com/umbraco/Umbraco-CMS/commit/d8df405db4ea884bb4b96f088d10d9a2070cf024","https://github.com/umbraco/Umbraco-CMS"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-j74q-mv2c-rxmp#NuGet/Umbraco.Cms.Web.BackOffice","url":"https://osv.dev/vulnerability/GHSA-j74q-mv2c-rxmp"}],"summary":"Umbraco CMS Open Redirect Bypass Protection"}