low3.7
CVE-2024-28868
Umbraco possible user enumeration
Impact
### Impact A user enumeration attack is possible. ### Affected versions Umbraco 10 with access to the native login screen ### Patches This is fixed in 10.8.5 ### Workarounds Disabling the native login screen, by exclusively use external logins.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | UmbracoCMS | >= 10.0.0, < 10.8.5 | 10.8.5 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Umbraco | Umbraco Cms | from 10.0.0 before 10.8.5 |