CVE-2020-29454: Incorrect Authorization

December 2, 2020 (updated July 21, 2021)

Editors/LogViewerController.cs in Umbraco allows a user to visit a logviewer endpoint even if they lack Applications.Settings access.

References

github.com/umbraco/Umbraco-CMS/pull/9361
nvd.nist.gov/vuln/detail/CVE-2020-29454

Code Behaviors & Features

Detect and mitigate CVE-2020-29454 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →