CVE-2012-1301: Improper Input Validation

April 13, 2017 (updated June 11, 2020)

The FeedProxy.aspx script in Umbraco allows remote attackers to proxy requests on their behalf via the “url” parameter.

References

www.securityfocus.com/archive/1/522218
www.securityfocus.com/bid/52912
nvd.nist.gov/vuln/detail/CVE-2012-1301
www.trustmatta.com/advisories/MATTA-2012-001.txt

Code Behaviors & Features

Detect and mitigate CVE-2012-1301 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →