CVE-2024-43377: Umbraco CMS Improper Access Control vulnerability

August 20, 2024 (updated September 17, 2024)

As an authenticated user one can access a few unintended endpoints

References

github.com/advisories/GHSA-hrww-x3fq-xcvh
github.com/umbraco/Umbraco-CMS
github.com/umbraco/Umbraco-CMS/commit/72bef8861d94a39d5cc9530a04c4797b91fcbecf
github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-hrww-x3fq-xcvh
nvd.nist.gov/vuln/detail/CVE-2024-43377

Code Behaviors & Features

Detect and mitigate CVE-2024-43377 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →