GHSA-wxw9-6pv9-c3xc

GitHub Security Advisory

Umbraco CMS Has Incomplete Server Termination During Explicit Sign-Out

✓ GitHub Reviewed MODERATE Has CVE

### Impact
During an explicit sign-out, the server session is not fully terminated.

NuGet Umbraco.CMS

Affected versions: 13.0.0 (fixed in 13.5.2)

NuGet Umbraco.CMS

Affected versions: 10.0.0 (fixed in 10.8.7)

CVE-2024-48929

GHSA ID

GHSA-wxw9-6pv9-c3xc

Published

October 22, 2024 6:13 PM

Last Modified

October 22, 2024 7:22 PM

CVSS Score

5.0 /10

Primary Ecosystem

NuGet

Primary Package

Umbraco.CMS

GitHub Reviewed

✓ Yes

Last updated: September 13, 2025 6:30 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.