SB20241022351 - Multiple vulnerabilities in Umbraco CMS

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Dangerous file upload (CVE-ID: CVE-2024-48927)

The vulnerability allows a remote attacker to perform XSS attacks.

The vulnerability exists due to the application allows to upload SVG files to the server. A remote user can upload a specially crafted SVG file with an arbitrary JavaScript code inside and execute ti in the victim's browser in the security context of the website once the image is viewed.

2) Insufficient Session Expiration (CVE-ID: CVE-2024-48929)

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to insufficient session expiration issue during an explicit sign-out. A remote non-authenticated attacker can obtain or guess session token and gain unauthorized access to session that belongs to another user.

3) Insufficient Session Expiration (CVE-ID: CVE-2024-48926)

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to Backoffice displays the logout page with a session timeout message before the server session has fully expired, causing users to believe they have been logged out approximately 30 seconds before they actually are.

Remediation

Install update from vendor's website.

References

• https://github.com/umbraco/Umbraco-CMS/releases/tag/release-13.5.2
• https://github.com/umbraco/Umbraco-CMS/releases/tag/release-10.8.7
• https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-5955-cwv4-h7qh
• https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-wxw9-6pv9-c3xc
• https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-fp6q-gccw-7qqm