CVE-2024-29035

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Umbraco is an ASP.NET CMS. Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical. This vulnerability is fixed in 13.1.1.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-918

Affected software

VendorProductVersions
umbracoUmbraco-CMS>= 13.0.0 , <13.1.1
umbracoumbraco_cms>= 13.0.0, < 13.1.1

References

Timeline

Published
Apr 17, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-290366.5Saleor Storefront is software for building e-commerce experiences. Prior to commit 579241e75a5eb332ccf26e0bcdd54befa33f4783, when any user aCVE-2024-290379.1datahub-helm provides the Kubernetes Helm charts for deploying Datahub and its dependencies on a Kubernetes cluster. Starting in version 0.1CVE-2024-290383.3tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data wCVE-2024-290398.1tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to manipulate tpm2_checkquCVE-2024-29048.8Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Calliope.This issue affects Calliope: from n/a through 1.0.33.CVE-2024-290404.3This repository hosts source code implementing the Trusted Computing Group's (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned bCVE-2024-290416.1Express.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are CVE-2024-290425.3Translate is a package that allows users to convert text to different languages on Node.js and the browser. Prior to version 3.0.0, an attacCVE-2024-290438.8Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityCVE-2024-290448.8Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityCVE-2024-290457.5Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityCVE-2024-290468.8Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability