← ターゲット選定に戻る

CMS

umbraco/Umbraco-CMS

Umbraco is a free and open source .NET content management system helping you deliver delightful digital experiences.

#umbraco-cms#cms#umbraco#csharp#hacktoberfest#dotnet-core#asp-net-core

スコア

55

/ 100

Star

5,185

Fork

2,879

Open Issue

485

サイズ

445MB

言語

C#

最終push

0 日前

Docker

—

採点内訳

過去CVE 20件 (やや多い)

✓

直近 push: 0 日前

✓

得意言語 (C#)

—

オープンissue 485件

✓

大規模 (445MB)

—

Docker 未対応

—

1k–10k: 初心者ベスト (★5,185)

✓

※ 各項目の重みは「採点ルール」を参照。合計は 0 で底打ち。

過去の SecurityAdvisory (20 件)

MEDIUMGHSA-vr9v-27gg-qgx4 CVE-2026-466092026/5/15
XSS/HTML Injection in Umbraco Backoffice confirmation dialog
MEDIUMGHSA-2qjj-h6wp-c7h7 CVE-2026-466162026/5/15
Open Redirect Vulnerability in Surface Controllers
MEDIUMGHSA-fpvf-fvp5-996r CVE-2026-318322026/3/10
Backoffice API Allows Unauthorized Modification of Domain Data
MEDIUMGHSA-vrqc-59mw-qqg7 CVE-2026-318332026/3/10
Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering
HIGHGHSA-rhcg-3h8r-v6vp CVE-2026-318342026/3/10
Vertical Privilege Escalation via Missing Authorization Checks
MEDIUMGHSA-hfv2-pf68-m33x CVE-2025-666252025/12/9
Unsafe Handling and Deletion of Temporary Files During the Dictionary Upload Process
MEDIUMGHSA-75vq-qvhr-7ffr CVE-2025-544252025/7/29
Delivery API allows for cached requests to be returned with an invalid API key
MEDIUMGHSA-pgvc-6h2p-q4f6 CVE-2025-491472025/6/24
Disclosure of Configured Password Requirements
MEDIUMGHSA-fr6r-p8hv-x3c4 CVE-2025-489532025/6/3
Possibility to By-Pass Configured Allowed Extensions for File Uploads
MEDIUMGHSA-4g8m-5mj5-c8xg CVE-2025-467362025/5/6
User Enumeration Feasible Based on Timing of Login Response
HIGHGHSA-q62r-8ppj-xvf4 CVE-2025-320172025/4/8
Management API Vulnerability to Path Traversal With Authenticated Users
MEDIUMGHSA-wx5h-wqfq-v698 CVE-2025-276022025/3/11
Restricted Editor User Can Delete Media Item or Access Unauthorized Content
MEDIUMGHSA-6ffg-mjg7-585x CVE-2025-276012025/3/11
Improper API Access Control Allows Low-Privilege Users to Data Type Functionality
MEDIUMGHSA-wv8v-rmw2-25wc CVE-2025-240122025/1/21
XSS/HTML Injection Vulnerability in Umbraco Backoffice Components
MEDIUMGHSA-hmg4-wwm5-p999 CVE-2025-240112025/1/21
User Enumeration Feasible Based On Management API Timing and Response Codes
MEDIUMGHSA-69cg-w8vm-h229 CVE-2024-107612025/1/21
XSS/HTML Injection Vulnerability in Umbraco Preview Badge
MEDIUMGHSA-wxw9-6pv9-c3xc CVE-2024-489292024/10/22
Incomplete Server Termination During Explicit Sign-Out
MEDIUMGHSA-5955-cwv4-h7qh CVE-2024-489272024/10/22
Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice
LOWGHSA-4gp9-ff99-j6vj CVE-2024-489252024/10/22
Improper Access Control Allows Low-Privilege Users to Access Webhook API
MEDIUMGHSA-c5g6-6xf7-qxp3 CVE-2024-478192024/10/22
Stored XSS in the “dictionary name” on Dictionary section