VULNERABILITY INTELLIGENCE

CVE-2021-47776

CVSS score5.3 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2026-01-15
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and GetRemoteDashboardCss endpoints to trigger unauthorized server-side requests to external hosts.

Weakness classification

  • disclosure@vulncheck.com: CWE-918

Primary references