~ / search / GHSA-6324-52pr-h4p5

GHSA-6324-52pr-h4p5

Using the directory back payload (“/../”) in a package name allows placement of package in other folders.

Source: GitHub Advisory Database (reviewed) Low CVE-2023-49089

Packages

EcosystemPackageAffectedFixed in
NuGet Umbraco.CMS >= 8.0.0, < 8.18.10 8.18.10
NuGet Umbraco.CMS >= 9.0.0, < 10.8.1 10.8.1
NuGet Umbraco.CMS >= 11.0.0, < 12.3.4 12.3.4

Details

As written in the advisory (Markdown source, shown as plain text).

#### Impact Backoffice users with permissions to create packages can use path traversal and thereby write outside of the expected location. #### Explanation of the vulnerability The “Package” section in Umbraco Backoffice allows a logged in user to write folders outside of the default package directory.

References

External links from the advisory. They lead to third-party sites.