Lucene search

K
osvGoogleOSV:GHSA-936X-WGQV-HHGQ
HistoryApr 13, 2021 - 3:51 p.m.

Authenticated path traversal in Umbraco CMS

2021-04-1315:51:33
Google
osv.dev
8
umbraco cms
authenticated
path traversal
package installation
vulnerability

EPSS

0.004

Percentile

75.4%

An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in arbitrary files being written outside of the site home and expected paths when installing an Umbraco package.

EPSS

0.004

Percentile

75.4%