CVE-2024-47819: Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section

October 22, 2024

This can be leveraged to gain access to higher-privilege endpoints, e.g. if you get a user with admin privileges to run the code, you can potentially elevate all users and grant them admin privileges or access protected content.

References

github.com/advisories/GHSA-c5g6-6xf7-qxp3
github.com/umbraco/Umbraco-CMS
github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-c5g6-6xf7-qxp3
nvd.nist.gov/vuln/detail/CVE-2024-47819

Code Behaviors & Features

Detect and mitigate CVE-2024-47819 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →