CVE-2024-43376

—

CVSS 3.1

5.3 medium

EPSS

<1%p30

Published

Aug 20, 2024 (Aug 20, 2024)

Modified

Jun 17, 2026

Description

Umbraco is an ASP.NET CMS. Some endpoints in the Management API can return stack trace information, even when Umbraco is not in debug mode. This vulnerability is fixed in 14.1.2.

Vendors: umbraco
Products: umbraco cms
Weakness: CWE-209
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.