CVE-2012-1301

Critical

Published: 13/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the 'url' parameter.

Attackers can exploit this vulnerability to perform proxy attacks, potentially leading to data exposure or other malicious actions.

It is recommended to update Umbraco to the latest version to mitigate this vulnerability and to monitor logs for potential exploitation attempts.

Original NVD description (English source)

The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter.