Blind SSRF Leads to Port Scan by using Webhooks

GHSA-74p6-39f2-23v3 · CVE-2024-29035

Published Apr 17, 2024 · Modified Sep 10, 2026

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

Impact

Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critical.

Affected Versions

Umbraco versions 13.0.0 - 13.1.1

Patches

13.1.1

Workarounds

Disabling webhooks functionality.

References

WEB https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-74p6-39f2-23v3
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-29035
WEB https://github.com/umbraco/Umbraco-CMS/commit/6b8067815c02ae43161966a8075a3585e1bc4de0
PACKAGE https://github.com/umbraco/Umbraco-CMS

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes