Publish Advisories

GHSA-4gmq-m9vp-jrwg
GHSA-99vm-5v2h-h6r6
GHSA-qxj7-2x7w-3mpp
This commit is contained in:
advisory-database[bot]
2025-02-19 17:48:07 +00:00
parent e334f2f96a
commit bfc93f2822
3 changed files with 148 additions and 6 deletions
@@ -1,13 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4gmq-m9vp-jrwg",
"modified": "2025-01-22T17:36:32Z",
"modified": "2025-02-19T17:47:37Z",
"published": "2024-11-04T06:30:30Z",
"aliases": [
"CVE-2024-10761"
],
"summary": "Umbraco CMS Cross-site Scripting vulnerability",
"details": "A vulnerability was found in Umbraco CMS 12.3.6. It has been classified as problematic. Affected is an unknown function of the file /Umbraco/preview/frame?id{} of the component Dashboard. The manipulation of the argument culture leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"withdrawn": "2025-02-19T17:47:37Z",
"aliases": [],
"summary": "Duplicate Advisory: Umbraco CMS Cross-site Scripting vulnerability",
"details": "# Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-69cg-w8vm-h229. This link is maintained to preserve external references.\n\n# Original Description\n\nA vulnerability was found in Umbraco CMS 12.3.6. It has been classified as problematic. Affected is an unknown function of the file /Umbraco/preview/frame?id{} of the component Dashboard. The manipulation of the argument culture leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long