CVE-2024-34071 json
Open Redirect Bypass Protection
published 2024-05-21 2 y ago modified 2026-09-10 1 mo ago also EUVD-2024-1661 , GHSA-j74q-mv2c-rxmp
- cvss
- 6.1
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 31%
- public exploits
- 0
- none known
Summary
Umbraco is an ASP.NET CMS used by more than 730.000 websites. Umbraco has an endpoint that is vulnerable to open redirects. The endpoint is protected so it requires the user to be signed into backoffice before the vulnerable is exposed. This vulnerability has been patched in version(s) 8.18.14, 10.8.6, 12.3.10 and 13.3.1.
Patch / fix
- nuget UmbracoCms.Core 8.18.14, 10.8.6, 12.3.10, 13.3.1
- nuget Umbraco.Cms.Web.BackOffice 8.18.14, 10.8.6, 12.3.10, 13.3.1
- umbraco umbraco_cms 8.18.14, 10.8.6, 12.3.10, 13.3.1
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
0.38% chance of exploitation in the next 30 days, higher than 31% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| GitHub | 3.1 | 6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| NVD | 3.1 | 6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| nuget | UmbracoCms.Core | >=8.18.5, <8.18.14 >=10.5.0, <10.8.6 >=12.0.0, <12.3.10 >=13.0.0, <13.3.1 |
8.18.14 10.8.6 12.3.10 13.3.1 |
| nuget | Umbraco.Cms.Web.BackOffice | >=8.18.5, <8.18.14 >=10.5.0, <10.8.6 >=12.0.0, <12.3.10 >=13.0.0, <13.3.1 |
8.18.14 10.8.6 12.3.10 13.3.1 |
Affected products
- umbraco Umbraco-CMS
- umbraco umbraco_cms
Classification
- Weakness
-
- CWE-601 URL Redirection to Untrusted Site
References
-
github.com
/umbraco/Umbraco-CMS/commit/5f24de308584b9771240a6db1a34630a5114c450
web, patch
-
github.com
/umbraco/Umbraco-CMS/commit/c17d4e1a600098ec524e4126f4395255476bc33f
web, patch
-
github.com
/umbraco/Umbraco-CMS/commit/c8f71af646171074c13e5c34f74312def4512031
web, patch
-
github.com
/umbraco/Umbraco-CMS/commit/d8df405db4ea884bb4b96f088d10d9a2070cf024
web, patch
-
github.com
/umbraco/Umbraco-CMS/security/advisories/GHSA-j74q-mv2c-rxmp
web, vendor-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2024-34071
advisory
-
github.com
/umbraco/Umbraco-CMS
package
Sources
- CVE List CVE-2024-34071
- GitHub Advisory GHSA-j74q-mv2c-rxmp
- NVD CVE-2024-34071
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.