Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:nuget/Umbraco.CMS@13.0.0
Typenuget
Namespace
NameUmbraco.CMS
Version13.0.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version7.15.11
Latest_non_vulnerable_version17.2.2
Affected_by_vulnerabilities
0
url VCID-e5g9-xgrk-eqaf
vulnerability_id VCID-e5g9-xgrk-eqaf
summary 
Umbraco has a Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice
There is a potential risk of code execution for Backoffice users when they “preview” SVG files in full screen mode.
references
0
reference_url https://github.com/umbraco/Umbraco-CMS
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/umbraco/Umbraco-CMS
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-48927
reference_id CVE-2024-48927
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-48927
2
reference_url https://github.com/advisories/GHSA-5955-cwv4-h7qh
reference_id GHSA-5955-cwv4-h7qh
reference_type
scores
url https://github.com/advisories/GHSA-5955-cwv4-h7qh
3
reference_url https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-5955-cwv4-h7qh
reference_id GHSA-5955-cwv4-h7qh
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-5955-cwv4-h7qh
fixed_packages
0
url pkg:nuget/Umbraco.CMS@13.5.2
purl pkg:nuget/Umbraco.CMS@13.5.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Umbraco.CMS@13.5.2
aliases CVE-2024-48927, GHSA-5955-cwv4-h7qh
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e5g9-xgrk-eqaf
1
url VCID-yhat-ry32-fqf5
vulnerability_id VCID-yhat-ry32-fqf5
summary 
Umbraco CMS disclosure of configured password requirements
Via a request to an anonymously authenticated endpoint it's possible to retrieve information about the configured password requirements.  The information available is limited but would perhaps give some additional detail useful for someone attempting to brute force derive a user's password.

The vulnerability can be found in the supported Umbraco versions 10 and 13.  It was not exposed in Umbraco 7 or 8, nor in 14 or higher versions.
references
0
reference_url https://github.com/umbraco/Umbraco-CMS
reference_id
reference_type
scores
url https://github.com/umbraco/Umbraco-CMS
1
reference_url https://github.com/umbraco/Umbraco-CMS/commit/b4144564c836ec6929111ce2a12eb1f67b42d61e
reference_id
reference_type
scores
url https://github.com/umbraco/Umbraco-CMS/commit/b4144564c836ec6929111ce2a12eb1f67b42d61e
2
reference_url https://github.com/umbraco/Umbraco-CMS/commit/d8f68d2c40f8e158bd81d469f25ef3a4e1d86c4c
reference_id
reference_type
scores
url https://github.com/umbraco/Umbraco-CMS/commit/d8f68d2c40f8e158bd81d469f25ef3a4e1d86c4c
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-49147
reference_id CVE-2025-49147
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2025-49147
4
reference_url https://github.com/advisories/GHSA-pgvc-6h2p-q4f6
reference_id GHSA-pgvc-6h2p-q4f6
reference_type
scores
url https://github.com/advisories/GHSA-pgvc-6h2p-q4f6
5
reference_url https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-pgvc-6h2p-q4f6
reference_id GHSA-pgvc-6h2p-q4f6
reference_type
scores
url https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-pgvc-6h2p-q4f6
fixed_packages
0
url pkg:nuget/Umbraco.CMS@13.9.2
purl pkg:nuget/Umbraco.CMS@13.9.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Umbraco.CMS@13.9.2
aliases CVE-2025-49147, GHSA-pgvc-6h2p-q4f6
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yhat-ry32-fqf5
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:nuget/Umbraco.CMS@13.0.0