~ / search / GHSA-h68c-4jh3-cp9j

GHSA-h68c-4jh3-cp9j

Umbraco CMS Authenticated File Upload

Source: GitHub Advisory Database (reviewed) High CVE-2020-9471

Packages

EcosystemPackageAffectedFixed in
NuGet UmbracoCMS.Core <= 8.5.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.

References

External links from the advisory. They lead to third-party sites.