GHSA-74p6-39f2-23v3
GitHub Security Advisory
Blind SSRF Leads to Port Scan by using Webhooks
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
### Impact
Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical.
### Affected Versions
Umbraco versions 13.0.0 - 13.1.1
### Patches
13.1.1
### Workarounds
Disabling webhooks functionality.
Affected Packages
NuGet
Umbraco.Cms.Core
Affected versions:
13.0.0
(fixed in 13.1.1)
NuGet
Umbraco.Cms.Web.BackOffice
Affected versions:
13.0.0
(fixed in 13.1.1)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 16, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.