Authenticated File Upload Vulnerability in Umbraco Cloud by Umbraco
CVE-2020-9471

8.8HIGH

Key Information:

Vendor

Umbraco

Status
Umbraco Cms
Vendor
CVE Published:
16 March 2020

What is CVE-2020-9471?

Umbraco Cloud version 8.5.3 contains a vulnerability that allows an authenticated user to upload files through the Install Packages feature. This functionality can be exploited to execute arbitrary code on the server, potentially leading to severe security breaches. Organizations using this version should review their security practices and upgrade to mitigate risks.

References

https://gitlab.com/eLeN3Re/cve-2020-9471
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.