~ / search / GHSA-fp6q-gccw-7qqm

GHSA-fp6q-gccw-7qqm

Umbraco CMS logout page displayed before session expiration

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-48926

Packages

EcosystemPackageAffectedFixed in
NuGet Umbraco.CMS >= 13.0.0, < 13.5.2 13.5.2
NuGet Umbraco.CMS >= 10.0.0, < 10.8.7 10.8.7
NuGet UmbracoCMS >= 8.0.0, < 8.18.15 8.18.15

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact The Backoffice displays the logout page with a session timeout message before the server session has fully expired, causing users to believe they have been logged out approximately 30 seconds before they actually are.

References

External links from the advisory. They lead to third-party sites.