Umbraco v8.14.1 - 'baseUrl' SSRF

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2021-47776 · Microsoft / collected KEV context

EUVD-2026-2753

GHSA-h66j-xm43-47pp

cve-program · CVE-2021-47776

• https://www.exploit-db.com/exploits/50462
• https://our.umbraco.com/
• https://releases.umbraco.com/all-releases

euvd · EUVD-2026-2753

• https://www.exploit-db.com/exploits/50462
• https://our.umbraco.com/
• https://releases.umbraco.com/all-releases

nvd · CVE-2021-47776

• https://our.umbraco.com/
• https://releases.umbraco.com/all-releases
• https://www.exploit-db.com/exploits/50462

osv · GHSA-h66j-xm43-47pp

• https://nvd.nist.gov/vuln/detail/CVE-2021-47776
• https://github.com/umbraco/Umbraco-CMS
• https://our.umbraco.com/
• https://releases.umbraco.com/all-releases
• https://www.exploit-db.com/exploits/50462

No related operational record is retained in the current change model.