diff --git a/advisories/github-reviewed/2024/08/GHSA-hrww-x3fq-xcvh/GHSA-hrww-x3fq-xcvh.json b/advisories/github-reviewed/2024/08/GHSA-hrww-x3fq-xcvh/GHSA-hrww-x3fq-xcvh.json index de7508fd3bc..841a60062b3 100644 --- a/advisories/github-reviewed/2024/08/GHSA-hrww-x3fq-xcvh/GHSA-hrww-x3fq-xcvh.json +++ b/advisories/github-reviewed/2024/08/GHSA-hrww-x3fq-xcvh/GHSA-hrww-x3fq-xcvh.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-hrww-x3fq-xcvh", - "modified": "2024-08-20T18:32:26Z", + "modified": "2024-09-17T16:19:46Z", "published": "2024-08-20T18:32:26Z", "aliases": [ "CVE-2024-43377" ], "summary": "Umbraco CMS Improper Access Control vulnerability", - "details": "### Impact\nAs an authenticated user one can access a few unintended endpoints\n\n\n\n", + "details": "### Impact\nAs an authenticated user one can access a few unintended endpoints\n\n### Explanation of the vulnerability\nFew endpoints in Umbraco Management API was not protected by a specific section. These just required you to be authenticated. Due to the fact that a member is also just authenticated, it was possible to get info from these endpoints using a member token.\n\n\n\n", "severity": [ { "type": "CVSS_V3",