1. Home
  2. CVE Database
  3. CVE-2024-29035
MEDIUM · 4.1

CVE-2024-29035

Umbraco is an ASP.NET CMS. Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical. This vulnerability is fixed in 13.1.1.

Vulnerability Description

Umbraco is an ASP.NET CMS. Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical. This vulnerability is fixed in 13.1.1.

CVSS Score

4.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
UmbracoUmbraco Cms>= 13.0.0, < 13.1.1

Related Weaknesses (CWE)

CWE-918

References

FAQ

What is CVE-2024-29035?

CVE-2024-29035 is a vulnerability with a CVSS score of 4.1 (MEDIUM). Umbraco is an ASP.NET CMS. Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical. This vulnerability is fixed in 13.1.1.

How severe is CVE-2024-29035?

CVE-2024-29035 has been rated MEDIUM with a CVSS base score of 4.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-29035?

Check the references section above for vendor advisories and patch information. Affected products include: Umbraco Umbraco Cms.