VDB
Sign up
MEDIUM4.1

GHSA-74p6-39f2-23v3

Blind SSRF Leads to Port Scan by using Webhooks

Quick fix

GHSA-74p6-39f2-23v3 — Umbraco.Cms.Core: upgrade to the fixed version with the command below.

dotnet add package Umbraco.Cms.Core --version 13.1.1

Details

### Impact Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical. ### Affected Versions Umbraco versions 13.0.0 - 13.1.1

### Patches 13.1.1

### Workarounds Disabling webhooks functionality.

Are you affected?

Enter the version of the package you're using.

Affected packages

NuGet/Umbraco.Cms.Core
Introduced in: 13.0.0Fixed in: 13.1.1
Fixdotnet add package Umbraco.Cms.Core --version 13.1.1
NuGet/Umbraco.Cms.Web.BackOffice
Introduced in: 13.0.0Fixed in: 13.1.1
Fixdotnet add package Umbraco.Cms.Web.BackOffice --version 13.1.1

References