Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:25:48 +0000 EUVD-2026-280821 https://cve.radiocsirt.org/vuln/euvd-2026-280821 EUVD-2026-280821 https://cve.radiocsirt.org/vuln/euvd-2026-280821 fkie_cve-2021-47776 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47776 <p>Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and GetRemoteDashboardCss endpoints to trigger unauthorized server-side requests to external hosts.</p> <p>Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and GetRemoteDashboardCss endpoints to trigger unauthorized server-side requests to external hosts.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-47776 GHSA-h66j-xm43-47pp — Umbraco CMS contains a server-side request forgery vulnerability https://cve.radiocsirt.org/vuln/ghsa-h66j-xm43-47pp <p><strong>Affected:</strong> NuGet: UmbracoCms</p> <p>Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and GetRemoteDashboardCss endpoints to trigger unauthorized server-side requests to external hosts.</p> <p><strong>Affected:</strong> NuGet: UmbracoCms</p> <p>Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and GetRemoteDashboardCss endpoints to trigger unauthorized server-side requests to external hosts.</p> https://cve.radiocsirt.org/vuln/ghsa-h66j-xm43-47pp