CVE-2023-49279CWE-79

Umbraco CMS vulnerable to stored XSS via SVG File Upload

Low · published December 12, 2023

CVSS v3.1
3.7
EPSS
0%
Percentile
31.9
In the wild
Unconfirmed
What it is

Umbraco is an ASP.NET content management system (CMS). Starting in version 7.0.0 and prior to versions 7.15.11, 8.18.9, 10.7.0, 11.5.0, and 12.2.0, a user with access to the backoffice can upload SVG files that include scripts. If the user can trick another user to load the media directly in a browser, the scripts can be executed. Versions 7.15.11, 8.18.9, 10.7.0, 11.5.0, and 12.2.0 contain a patch for this issue. Some workarounds are available. Implement the server side file validation or serve all media from an different host (e.g cdn) than where Umbraco is hosted.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00390 · 31.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2023-12-12T19:35Z
EPSS history
Timeline
  • 12 DEC 19:35Z
    Umbraco CMS vulnerable to stored XSS via SVG File Upload
    cvelistv5