CVE-2025-66625

Katalog CVE

CVSS 4.9 · Medium EPSS 0,36%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada umbraco cms. Skor CVSS 3.1 4.9 (Medium) menurut github.com.

Deskripsi (NVD)

Umbraco is an ASP.NET CMS. Due to unsafe handling and deletion of temporary files in versions 10.0.0 through 13.12.0, during the dictionary upload process an attacker with access to the backoffice can trigger predictable requests to temporary file paths. The application’s error responses (HTTP 500 when a file exists, 404 when it does not) allow the attacker to enumerate the existence of arbitrary files on the server’s filesystem. This vulnerability does not allow reading or writing file contents. In certain configurations, incomplete clean-up of temporary upload files may additionally expose the NTLM hash of the Windows account running the Umbraco application. This issue is fixed in version 13.12.1.

Rincian

Terbit di NVD

9 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.9 (Medium), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-377: Insecure Temporary File
CWE-552: Files or Directories Accessible to External Parties

EPSS (30 hari)

0,36% peluang dieksploitasi; lebih tinggi dari 27,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/umbraco/Umbraco-CMS/commit/7505efd433189037f46547932d4a8b603fd4a615 patch
• https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-hfv2-pf68-m33x patch · advisory pihak ketiga