| |
Vulnerability CVE-2023-49274
Published: 2023-12-12 Modified: 2023-12-14
| Description: |
Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a user enumeration attack is possible when SMTP is not set up correctly, but reset password is enabled. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue. |
Type:
CWE-200 (Information Exposure)
References: |
https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-8qp8-9rpw-j46c
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
