All products

umbraco.cms.web.backoffice

NuGet · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Blind SSRF Leads to Port Scan by using WebhooksCVE-2024-29035 · GHSA-74P6-39F2-23V3 umbraco.cms.coreumbraco.cms.web.backoffice NuGet Medium Fix reported
Umbraco CMS Open Redirect Bypass Protection CVE-2024-34071 · GHSA-J74Q-MV2C-RXMP umbraco.cms.web.backofficeumbracocms.core NuGet Medium Fix reported
Umbraco Allows a Restricted Editor User to Delete Media Item or Access Unauthorized ContentCVE-2025-27602 · GHSA-WX5H-WQFQ-V698 umbraco.cms.web.backoffice NuGet Medium Fix reported
Umbraco allows possible Admin-level access to backoffice without Auth under rare conditionsCVE-2023-37267 · GHSA-H8WC-R4JH-MG7M umbraco.cms.infrastructureumbraco.cms.web.backoffice NuGet High Fix reported