Nikolaj Geisle

8 exploits Active since Jul 2023
CVE-2023-37267 WRITEUP HIGH WRITEUP
Umbraco CMS 10.0.0-10.6.0 - Unauthenticated Privilege Escalation to Admin
Umbraco is a ASP.NET CMS. Under rare conditions a restart of Umbraco can allow unauthorized users access to admin-level permissions. This vulnerability was patched in versions 10.6.1, 11.4.2 and 12.0.1.
CVSS 7.5
CVE-2023-37267 WRITEUP HIGH WRITEUP
Umbraco CMS 10.0.0-10.6.0 - Unauthenticated Privilege Escalation to Admin
Umbraco is a ASP.NET CMS. Under rare conditions a restart of Umbraco can allow unauthorized users access to admin-level permissions. This vulnerability was patched in versions 10.6.1, 11.4.2 and 12.0.1.
CVSS 7.5
CVE-2024-35218 WRITEUP MEDIUM WRITEUP
Umbraco CMS 8.0.0-8.18.13 - Stored Cross-Site Scripting
Umbraco CMS is an ASP.NET CMS used by more than 730.000 websites. Stored Cross-site scripting (XSS) enable attackers that have access to backoffice to bring malicious content into a website or application. This vulnerability has been patched in version(s) 8.18.13, 10.8.4, 12.3.7, 13.1.1 by implementing IHtmlSanitizer.
CVSS 4.2
CVE-2024-35218 WRITEUP MEDIUM WRITEUP
Umbraco CMS 8.0.0-8.18.13 - Stored Cross-Site Scripting
Umbraco CMS is an ASP.NET CMS used by more than 730.000 websites. Stored Cross-site scripting (XSS) enable attackers that have access to backoffice to bring malicious content into a website or application. This vulnerability has been patched in version(s) 8.18.13, 10.8.4, 12.3.7, 13.1.1 by implementing IHtmlSanitizer.
CVSS 4.2
CVE-2024-35218 WRITEUP MEDIUM WRITEUP
Umbraco CMS 8.0.0-8.18.13 - Stored Cross-Site Scripting
Umbraco CMS is an ASP.NET CMS used by more than 730.000 websites. Stored Cross-site scripting (XSS) enable attackers that have access to backoffice to bring malicious content into a website or application. This vulnerability has been patched in version(s) 8.18.13, 10.8.4, 12.3.7, 13.1.1 by implementing IHtmlSanitizer.
CVSS 4.2
CVE-2023-37267 WRITEUP HIGH WRITEUP
Umbraco CMS 10.0.0-10.6.0 - Unauthenticated Privilege Escalation to Admin
Umbraco is a ASP.NET CMS. Under rare conditions a restart of Umbraco can allow unauthorized users access to admin-level permissions. This vulnerability was patched in versions 10.6.1, 11.4.2 and 12.0.1.
CVSS 7.5
CVE-2024-29035 WRITEUP MEDIUM WRITEUP
Umbraco CMS 13.0.0-13.1.0 - Server-Side Request Forgery via Webhook Logs
Umbraco is an ASP.NET CMS. Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical. This vulnerability is fixed in 13.1.1.
CVSS 4.1
CVE-2024-35218 WRITEUP MEDIUM WRITEUP
Umbraco CMS 8.0.0-8.18.13 - Stored Cross-Site Scripting
Umbraco CMS is an ASP.NET CMS used by more than 730.000 websites. Stored Cross-site scripting (XSS) enable attackers that have access to backoffice to bring malicious content into a website or application. This vulnerability has been patched in version(s) 8.18.13, 10.8.4, 12.3.7, 13.1.1 by implementing IHtmlSanitizer.
CVSS 4.2