Authenticated path traversal in Umbraco CMS

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-5811 · ADVISORY
• tenable.com/security/research/tra-2020-59 · WEB
• packetstormsecurity.com/files/163965/Umbraco-CMS-8.9.1-Traversal-Arbitrary-File-Write.html · WEB

UmbracoCms のその他の脆弱性

• CVE-2021-47776中 5.3Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple …
• CVE-2024-48927中 4.6Umbraco, a free and open source .NET content management system, has a remote code execution issue in versions on the 13.x branch prior to 13…
• CVE-2020-29454中 4.3Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings …
• CVE-2020-9472中 6.5Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality.