CVE-2024-28868

Summary

CVE-2024-28868 is a vulnerability affecting Umbraco, an ASP.NET content management system. Versions 10 and below up to 10.8.4 are vulnerable to user enumeration attacks if the native login screen is accessible. This issue can be mitigated by disabling the native login screen and relying solely on external logins. The vulnerability was addressed in version 10.8.5.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.