CVE-2025-24011
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Jan 21, 2025
CWE ID 200
Summary
CVE-2025-24011 is a vulnerability affecting Umbraco, a free and open-source .NET content management system. In versions prior to 14.3.2 and 15.1.2, specifically starting from version 14.0.0, an attacker can determine the existence of an account by analyzing response codes and the timing of Umbraco management API responses. This issue can lead to potential account enumeration and unauthorized access. Versions 14.3.2 and 15.1.2 have been patched to address this vulnerability, and no known workarounds are available for the unpatched versions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- CMs
Affected Vendors
- Pluck -