Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-15280
4.3
MEDIUMCVSS v2
Published
October 12, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
XML external entity (XXE) vulnerability in Umbraco CMS before 7.7.3 allows attackers to obtain sensitive information by reading files on the server or sending TCP requests to intranet hosts (aka SSRF), related to Umbraco.Web/umbraco.presentation/umbraco/dialogs/importDocumenttype.aspx.cs.
umbraco/Umbraco-CMS
GitHubUmbraco is a free and open source .NET content management system helping you deliver delightful digital experiences.
GitHubUmbraco is a free and open source .NET content management system helping you deliver delightful digital experiences.<= 7.7.2NVD