{"id":"CVE-2021-34254","details":"Umbraco CMS before 7.15.7 is vulnerable to Open Redirection due to insufficient url sanitization on booting.aspx.","modified":"2026-07-09T00:06:12.485778Z","published":"2021-06-28T16:15:08.743Z","references":[{"type":"REPORT","url":"https://github.com/umbraco/Umbraco-CMS/issues/9782"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/umbraco/umbraco-cms","events":[{"introduced":"0"},{"fixed":"7447cc4b7eb2c66f2ba4ecba02d0dbdfbbab2d4f"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"7.15.7"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:umbraco:umbraco_cms:*:*:*:*:*:*:*:*"}}],"versions":["release-7.15.6","release-7.15.5","release-7.15.3","release-7.4.3","release-7.5.14","release-7.7.13","release-7.14.0","release/7.15.2","release-7.15.2","release-7.15.1","release-7.15.0","release-7.10.0","release-7.13.0","release-7.12.1","release-7.12.0","release-7.11.0","release-7.6.7","release-7.9.3","release-7.9.2","release-7.9.1","release-7.7.12","release-7.7.11","release-7.7.10","release-7.7.9","release-7.7.8","release-7.7.6","release-7.7.7","release-7.7.5","release-7.7.4","release-7.6.3","release-7.7.2","release-7.6.8","release-7.6.2","release-7.5.13","release-7.5.12","release-7.5.11","release-7.5.10","release-7.5.9","release-7.5.8","release-7.5.3","release-7.5.5","release-7.5.1","release-7.5.0","release-7.5.0-beta2","release-7.5.0-beta","release-7.4.2","release-7.4.1","release-7.4.0-beta2","release-7.4.0","release-7.4.0-RC1","release-7.2.0-beta2","release-7.2.0-beta","release-7.1.4","release-7.2.0-alpha","release-7.1.3","release-7.1.2","release-7.1.1","release-7.1.0","release-7.1.0-RC","release-7.0.0","release-7.0.0-RC","release-7.0.0-beta","release-6.1.0-beta","4.7.2","Release-4.6.0","Sprint-Juno-A","Release-4.5.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-34254.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}