GHSA-x34j-wxq8-7vcm CVE-2015-8813
Umbraco CMS vulnerable to CSRF
- Severity
- 8.2 / 10
- High · CVSS 3.0
- Exploit chance (EPSS)
- 11.15%
- Chance of exploitation in the next 30 days. Higher than 95.95% of scored vulnerabilities.
- Known exploited
- No
- Not in CISA's catalog
- Weakness
- CWE-918 Server-Side Request Forgery (SSRF)
- Fix
7.4.0- Upgrade Umbraco.CMS to this version or later
Description
The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attackers to conduct server-side request forgery (SSRF) attacks via the url parameter.
Affected versions
NuGet
| Package | Vulnerable | Fixed in |
|---|---|---|
| Umbraco.CMS | < 7.4.0 |
7.4.0 |
How to fix
Move to the fixed version or later with your package manager, update the lockfile, and run your tests. If the package only arrives through another dependency, upgrade that dependency first. If none of its releases pulls a fixed version yet, force the version with your package manager's override.
Umbraco.CMS NuGet → 7.4.0
- dotnet
dotnet add package Umbraco.CMS --version 7.4.0
Severity breakdown
CVSS 3.0 8.2
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- None
- User interaction
- Required
- Scope
- Changed
- Confidentiality
- Low
- Integrity
- High
- Availability
- None
Weakness
CWE-918: Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
References
Advisories
Other links
- github.com/umbraco/Umbraco-CMS/commit/924a016ffe7ae7ea6d516c07a7852f0095eddbce
- web.archive.org/web/20230608160721/https://issues.umbraco.org/issue/U4-7457
- openwall.com/lists/oss-security/2016/02/16/10
- openwall.com/lists/oss-security/2016/02/17/1
- openwall.com/lists/oss-security/2016/02/17/5
- openwall.com/lists/oss-security/2016/02/18/8
Timeline
- Published
- Last updated by the source
- Latest EPSS score
Related advisories
| Advisory | Severity | Why it's related |
|---|---|---|
| GHSA-wr57-hqmp-fgvh Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree Picker expansion | High | Also affects Umbraco.Cms |
| GHSA-vr9v-27gg-qgx4 Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog | Medium | Also affects Umbraco.Cms |
| GHSA-2qjj-h6wp-c7h7 Umbraco.Cms: Open Redirect Vulnerability in Surface Controllers | Medium | Also affects Umbraco.Cms |
| GHSA-rhcg-3h8r-v6vp Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks | High | Also affects Umbraco.Cms |
| GHSA-vrqc-59mw-qqg7 Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering | Medium | Also affects Umbraco.Cms |
| GHSA-fpvf-fvp5-996r Umbraco Backoffice API Allows Unauthorized Modification of Domain Data | Medium | Also affects Umbraco.Cms |
| GHSA-54mj-vcvj-q3v5 Umbraco CMS has an arbitrary file upload vulnerability | Critical | Also affects Umbraco.Cms |
| GHSA-hfv2-pf68-m33x Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality | Medium | Also affects Umbraco.Cms |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor