CVE-2015-8813

Severity CVSS v4.0:
Pending analysis
Type:
CWE-918 Server-Side Request Forgery (SSRF)
Publication date:
03/03/2017
Last modified:
20/04/2025

Description

The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attackers to conduct server-side request forgery (SSRF) attacks via the url parameter.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:umbraco:umbraco:*:*:*:*:*:*:*:* 7.3.8 (including)