What is GHSA-552f-97wf-pmpq?

GHSA-552f-97wf-pmpq is a security advisory published by GitHub Security Advisories with Low severity. Umbraco possible user enumeration

Which CVE IDs does GHSA-552f-97wf-pmpq cover?

GHSA-552f-97wf-pmpq covers the following CVE IDs: CVE-2024-28868. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-552f-97wf-pmpq?

GHSA-552f-97wf-pmpq has a CVSS v3 base score of 3.7, published by GitHub Security Advisories.

Which products are affected by GHSA-552f-97wf-pmpq?

GHSA-552f-97wf-pmpq affects 1 product, including: nuget/UmbracoCMS:\u003e= 10.0.0, \u003c 10.8.5.

GHSA-552f-97wf-pmpqLowCVSS 3.7

Umbraco possible user enumeration

Vendor

GitHub Security Advisories

Published

March 20, 2024

Last Modified

February 12, 2025

🔗 CVE IDs covered (1)

CVE-2024-28868 →

📋 Description

Impact

A user enumeration attack is possible.

Affected versions

Umbraco 10 with access to the native login screen

Patches

This is fixed in 10.8.5

Workarounds

Disabling the native login screen, by exclusively use external logins.

🎯 Affected products1

nuget/UmbracoCMS:>= 10.0.0, < 10.8.5

🔗 References (4)

https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-552f-97wf-pmpq
https://github.com/umbraco/Umbraco-CMS/commit/7e1d1a1968000226cd882fff078b122b8d46c44d
https://nvd.nist.gov/vuln/detail/CVE-2024-28868
https://github.com/advisories/GHSA-552f-97wf-pmpq