NetSight
high8.8

CVE-2020-9471

Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.

Impact

Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.

Affected products

VendorProductAffected versions
UmbracoUmbraco Cms
Version 8.5.3

Weakness classification

References