MEDIUM4.1NuGet
GHSA-74p6-39f2-23v3· CVE-2024-29035Blind SSRF Leads to Port Scan by using Webhooks
Modified: 9/10/2026
package
NuGet/Umbraco.Cms.Web.BackOffice
pkg:nuget/Umbraco.Cms.Web.BackOffice
HIGH7.5NuGet
GHSA-h8wc-r4jh-mg7m· CVE-2023-37267Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions
Modified: 2/16/2024
MEDIUM6.1NuGet
GHSA-j74q-mv2c-rxmp· CVE-2024-34071Umbraco CMS Open Redirect Bypass Protection
Modified: 9/10/2026