CVE-2023-49274

Summary

CVE-2023-49274 is a vulnerability affecting Umbraco, an ASP.NET content management system. Versions prior to 8.18.10, 10.8.1, and 12.3.4 are susceptible to a user enumeration attack if SMTP is not configured correctly and the reset password feature is enabled. This issue allows attackers to determine valid usernames, posing a risk to account security. Users of these affected versions are advised to update to the patched versions, 8.18.10, 10.8.1, and 12.3.4, to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.