Authenticated path traversal in Umbraco CMS

GHSA-936x-wgqv-hhgq · CVE-2020-5811

Published Apr 13, 2021 · Modified Nov 8, 2023

Description

An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in arbitrary files being written outside of the site home and expected paths when installing an Umbraco package.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-5811
WEB https://www.tenable.com/security/research/tra-2020-59
WEB http://packetstormsecurity.com/files/163965/Umbraco-CMS-8.9.1-Traversal-Arbitrary-File-Write.html

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes