Headline
GHSA-552f-97wf-pmpq: Umbraco possible user enumeration
Impact
A user enumeration attack is possible.
Affected versions
Umbraco 10 with access to the native login screen
Patches
This is fixed in 10.8.5
Workarounds
Disabling the native login screen, by exclusively use external logins.
Package
nuget UmbracoCMS (NuGet)
Affected versions
>= 10.0.0, < 10.8.5
Patched versions
10.8.5
Description
Impact
A user enumeration attack is possible.
Affected versions
Umbraco 10 with access to the native login screen
Patches
This is fixed in 10.8.5
Workarounds
Disabling the native login screen, by exclusively use external logins.
References
- GHSA-552f-97wf-pmpq
- umbraco/Umbraco-CMS@7e1d1a1
bergmania published to umbraco/Umbraco-CMS
Mar 20, 2024
Published to the GitHub Advisory Database
Mar 20, 2024
Reviewed
Mar 20, 2024