~ / search / GHSA-wxw9-6pv9-c3xc

GHSA-wxw9-6pv9-c3xc

Umbraco CMS Has Incomplete Server Termination During Explicit Sign-Out

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-48929

Packages

EcosystemPackageAffectedFixed in
NuGet Umbraco.CMS >= 13.0.0, < 13.5.2 13.5.2
NuGet Umbraco.CMS >= 10.0.0, < 10.8.7 10.8.7

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact During an explicit sign-out, the server session is not fully terminated.

References

External links from the advisory. They lead to third-party sites.