← CVE Intelligence

CVE-2023-49278

Umbraco CMS brute force exploit can be used to collect valid usernames PUBLISHED

Description (CNA)

Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a brute force exploit can be used to collect valid usernames. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue.

Affected (CNA)

Vendor / productVersions
umbraco / Umbraco-CMSaffected >= 8.0.0, < 8.18.10; affected >= 9.0.0-rc001, < 10.8.1; affected >= 11.0.0-rc1, < 12.3.4

CWE

CWE-200, CWE-307

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.