high7.7
CVE-2023-49089
Using the directory back payload (“/../”) in a package name allows placement of package in other folders.
Impact
#### Impact Backoffice users with permissions to create packages can use path traversal and thereby write outside of the expected location. #### Explanation of the vulnerability The “Package” section in Umbraco Backoffice allows a logged in user to write folders outside of the default package directory.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | Umbraco.CMS | >= 8.0.0, < 8.18.10 | 8.18.10 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Umbraco | Umbraco Cms | from 8.0.0 before 8.18.10 from 10.0.0 before 10.8.1 from 12.0.0 before 12.3.0 |