Launch Week Day 1: Announcing Security Design Review
Start for Free
HIGH 8.8 NuGet

Umbraco CMS Authenticated File Upload

GHSA-h68c-4jh3-cp9j · CVE-2020-9471

Published · Modified

Description

Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.

References

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes