Servers and applications
CVE-2024-48927
Umbraco, a free and open source .NET content management system, has a remote code execution issue in versions on the 13.x branch prior to 13.5.2, 10.x prior to 10.8.7, and 8.x prior to 8.18.15. There is a potential risk of code execution for Backoffice users when they “preview” SVG files in full screen mode. Versions 13.5.2, 10.8,7, and 8.18.15 contain a patch for the issue. As a workaround,…
- Severity
- Medium 4.6
- Published
- 22 Oct 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 8.18.15, 10.8.7, 13.5.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Umbraco CMSServers and applications · cpe:a:umbraco:umbraco_cms |
|