Launch Week Day 1: Announcing Security Design Review
MEDIUM 4.2 NuGet

Umbraco CMS logout page displayed before session expiration

GHSA-fp6q-gccw-7qqm · CVE-2024-48926

Published · Modified

Description

Impact

The Backoffice displays the logout page with a session timeout message before the server session has fully expired, causing users to believe they have been logged out approximately 30 seconds before they actually are.

Ready to move

Start Securing

Free, no credit card | First findings in minutes