GHSA-fp6q-gccw-7qqmMediumCVSS 4.2

Umbraco CMS logout page displayed before session expiration

Published
October 22, 2024
Last Modified
October 23, 2024

🔗 CVE IDs covered (1)

CVE-2024-48926 →

📋 Description

Impact

The Backoffice displays the logout page with a session timeout message before the server session has fully expired, causing users to believe they have been logged out approximately 30 seconds before they actually are.

🎯 Affected products3

  • nuget/Umbraco.CMS:>= 13.0.0, < 13.5.2
  • nuget/Umbraco.CMS:>= 10.0.0, < 10.8.7
  • nuget/UmbracoCMS:>= 8.0.0, < 8.18.15

🔗 References (3)