CVE-2020-5811

2020-12-3015:17:57

tenable

www.cve.org

umbraco cms

path traversal vulnerability

authenticated

arbitrary files.

EPSS

0.004

Percentile

75.4%

JSON

An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in arbitrary files being written outside of the site home and expected paths when installing an Umbraco package.

CNA Affected

[
  {
    "product": "Umbraco CMS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "<= 8.9.1 or current (unfixed)"
      }
    ]
  }
]