In short
- CVE-2020-9471 is a HIGH (CVSS 8.8) vulnerability affecting UmbracoCMS.Core, umbraco cms (umbraco).
- Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.1% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.
NVD description
Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.
More vulnerabilities in UmbracoCMS.Core
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free