From 90540116b3c6a8bd589bb3afb24d8f000247c13a Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 17 Sep 2024 16:21:13 +0000
Subject: [PATCH] Publish GHSA-hrww-x3fq-xcvh

---
 .../2024/08/GHSA-hrww-x3fq-xcvh/GHSA-hrww-x3fq-xcvh.json      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2024/08/GHSA-hrww-x3fq-xcvh/GHSA-hrww-x3fq-xcvh.json b/advisories/github-reviewed/2024/08/GHSA-hrww-x3fq-xcvh/GHSA-hrww-x3fq-xcvh.json
index de7508fd3bc..841a60062b3 100644
--- a/advisories/github-reviewed/2024/08/GHSA-hrww-x3fq-xcvh/GHSA-hrww-x3fq-xcvh.json
+++ b/advisories/github-reviewed/2024/08/GHSA-hrww-x3fq-xcvh/GHSA-hrww-x3fq-xcvh.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hrww-x3fq-xcvh",
-  "modified": "2024-08-20T18:32:26Z",
+  "modified": "2024-09-17T16:19:46Z",
   "published": "2024-08-20T18:32:26Z",
   "aliases": [
     "CVE-2024-43377"
   ],
   "summary": "Umbraco CMS Improper Access Control vulnerability",
-  "details": "### Impact\nAs an authenticated user one can access a few unintended endpoints\n\n\n\n",
+  "details": "### Impact\nAs an authenticated user one can access a few unintended endpoints\n\n### Explanation of the vulnerability\nFew endpoints in Umbraco Management API was not protected by a specific section. These just required you to be authenticated. Due to the fact that a member is also just authenticated, it was possible to get info from these endpoints using a member token.\n\n\n\n",
   "severity": [
     {
       "type": "CVSS_V3",