A vulnerability classified as problematic has been found in Umbraco CMS up to 10.8.6/13.5.1. Affected is an unknown function of the component Sign-Out. The manipulation leads to session fixiation.

This vulnerability is traded as CVE-2024-48929. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.