Medium severity4.3NVD Advisory· Published Aug 20, 2024· Updated Jun 17, 2026

CVE-2024-43376

Description

Umbraco is an ASP.NET CMS. Some endpoints in the Management API can return stack trace information, even when Umbraco is not in debug mode. This vulnerability is fixed in 14.1.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
Umbraco.Cms.Api.ManagementNuGet	>= 14.0.0, < 14.1.2	14.1.2

Affected products

Umbraco/Umbraco CMS2 versions
cpe:2.3:a:umbraco:umbraco_cms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:umbraco:umbraco_cms:*:*:*:*:*:*:*:*range: >=14.0.0,<14.1.2
- (no CPE)range: >= 14.0.0, < 14.1.2
ghsa-coords
pkg:nuget/umbraco.cms.api.management
Range: >= 14.0.0, < 14.1.2

Patches

Vulnerability mechanics

References

github.com/umbraco/Umbraco-CMS/commit/b76070c794925932cb159ef50b851db6e966a004nvdPatchWEB
github.com/advisories/GHSA-77gj-crhp-3gvxghsaADVISORY
github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-77gj-crhp-3gvxnvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2024-43376ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000