VULNERABILITY INTELLIGENCE

CVE-2024-43376

CVSS score4.3 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2024-08-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Umbraco is an ASP.NET CMS. Some endpoints in the Management API can return stack trace information, even when Umbraco is not in debug mode. This vulnerability is fixed in 14.1.2.

Weakness classification

  • security-advisories@github.com: CWE-209
  • nvd@nist.gov: CWE-209

Primary references