Umbraco Web Installer Scanner

This scanner checks for accessible Umbraco setup endpoints that could allow an attacker to reinstall or reconfigure the CMS.

Short Info


Level

High

Single Scan

Single Scan

Can be used by

Asset Owner

Estimated Time

10 seconds

Time Interval

20 days 13 hours

Scan only one

URL

Toolbox

Umbraco is an open-source content management system (CMS) used by developers and organizations to build and manage dynamic websites. It is popular for its flexibility, user-friendly interface, and strong community support. Web developers often choose Umbraco to create scalable and customizable digital experiences, from corporate sites to e-commerce platforms. In production, Umbraco handles content editing, media management, and user permissions, making it a critical component of many online businesses.

The vulnerability involves the exposure of the Umbraco installation page, which is typically used during initial setup. This page can remain accessible if not properly secured after deployment. The issue arises from misconfiguration or oversight, where the installer endpoint (e.g., /install or /umbraco/install) is left unprotected. An attacker can exploit this to access setup wizards, modify configuration, or gain administrative privileges.

Technically, the scanner targets the Umbraco installation URL, such as /umbraco/install/default.aspx. If this endpoint is accessible, it may reveal sensitive information about the server environment, database credentials, or allow reinstallation of the CMS. The vulnerability is often due to missing access controls or failure to remove installer files post-deployment. This exposure can be detected by sending a simple HTTP request to the installer path and analyzing the response.

If exploited, an attacker could reinstall Umbraco, overwrite existing configurations, or gain unauthorized admin access. This could lead to data theft, website defacement, or complete compromise of the CMS. The CVSS score of 8.0 reflects the high risk of unauthorized access and potential for significant impact on confidentiality, integrity, and availability.

Get started to protecting your digital assets