{"id":"GHSA-fp6q-gccw-7qqm","summary":"Umbraco CMS logout page displayed before session expiration","details":"### Impact\nThe Backoffice displays the logout page with a session timeout message before the server session has fully expired, causing users to believe they have been logged out approximately 30 seconds before they actually are.\n","aliases":["CVE-2024-48926"],"modified":"2024-10-22T19:33:23.491375Z","published":"2024-10-22T17:55:01Z","database_specific":{"github_reviewed":true,"github_reviewed_at":"2024-10-22T17:55:01Z","nvd_published_at":"2024-10-22T16:15:08Z","cwe_ids":["CWE-613"],"severity":"MODERATE"},"references":[{"type":"WEB","url":"https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-fp6q-gccw-7qqm"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-48926"},{"type":"PACKAGE","url":"https://github.com/umbraco/Umbraco-CMS"}],"affected":[{"package":{"name":"Umbraco.CMS","ecosystem":"NuGet","purl":"pkg:nuget/Umbraco.CMS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.0.0"},{"fixed":"13.5.2"}]}],"versions":["13.0.0","13.0.1","13.0.2","13.0.3","13.1.0","13.1.0-rc","13.1.1","13.2.0","13.2.0-rc","13.2.1","13.2.2","13.3.0","13.3.0-rc","13.3.1","13.3.2","13.4.0","13.4.0-rc","13.4.0-rc2","13.4.1","13.5.0","13.5.0-rc","13.5.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/10/GHSA-fp6q-gccw-7qqm/GHSA-fp6q-gccw-7qqm.json"}},{"package":{"name":"Umbraco.CMS","ecosystem":"NuGet","purl":"pkg:nuget/Umbraco.CMS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0"},{"fixed":"10.8.7"}]}],"versions":["10.0.0","10.0.1","10.1.0","10.1.0-rc","10.1.0-rc2","10.1.1","10.2.0","10.2.0-rc","10.2.1","10.3.0","10.3.0-rc","10.3.1","10.3.2","10.4.0","10.4.0-rc","10.4.1","10.4.2","10.5.0","10.5.0-rc","10.5.1","10.6.0","10.6.0-rc","10.6.1","10.7.0","10.7.0-rc","10.8.0","10.8.0-rc","10.8.1","10.8.2","10.8.3","10.8.4","10.8.5","10.8.6"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/10/GHSA-fp6q-gccw-7qqm/GHSA-fp6q-gccw-7qqm.json"}},{"package":{"name":"UmbracoCMS","ecosystem":"NuGet","purl":"pkg:nuget/UmbracoCMS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.18.15"}]}],"versions":["8.0.0","8.0.1","8.0.2","8.0.3","8.1.0","8.1.1","8.1.2","8.1.3","8.1.4","8.1.5","8.1.6","8.10.0","8.10.0-rc","8.10.1","8.10.2","8.10.3","8.11.0","8.11.0-rc","8.11.1","8.11.2","8.11.3","8.12.0","8.12.0-rc","8.12.1","8.12.2","8.12.3","8.13.0","8.13.0-rc","8.13.1","8.14.0","8.14.0-rc","8.14.1","8.14.2","8.14.3","8.14.4","8.15.0","8.15.0-rc","8.15.1","8.15.2","8.15.3","8.16.0","8.16.0-rc","8.17.0","8.17.0-rc","8.17.0-rc2","8.17.1","8.17.2","8.18.0","8.18.0-rc","8.18.0-rc2","8.18.1","8.18.10","8.18.11","8.18.12","8.18.13","8.18.14","8.18.2","8.18.3","8.18.4","8.18.5","8.18.6","8.18.7","8.18.8","8.18.9","8.2.0","8.2.0-rc","8.2.1","8.2.2","8.2.3","8.3.0","8.3.1","8.4.0","8.4.0-rc","8.4.1","8.4.2","8.5.0","8.5.1","8.5.2","8.5.3","8.5.4","8.5.5","8.6.0","8.6.0-rc","8.6.1","8.6.2","8.6.3","8.6.4","8.6.5","8.6.6","8.6.7","8.6.8","8.7.0","8.7.0-rc","8.7.1","8.7.2","8.7.3","8.8.0","8.8.0-rc","8.8.1","8.8.2","8.8.3","8.8.4","8.9.0","8.9.0-rc","8.9.1","8.9.2","8.9.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/10/GHSA-fp6q-gccw-7qqm/GHSA-fp6q-gccw-7qqm.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"}]}