What is GHSA-936x-wgqv-hhgq?

GHSA-936x-wgqv-hhgq is a security advisory published by GitHub Security Advisories with Medium severity. Authenticated path traversal in Umbraco CMS

Which CVE IDs does GHSA-936x-wgqv-hhgq cover?

GHSA-936x-wgqv-hhgq covers the following CVE IDs: CVE-2020-5811. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-936x-wgqv-hhgq?

GHSA-936x-wgqv-hhgq has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-936x-wgqv-hhgq?

GHSA-936x-wgqv-hhgq affects 1 product, including: nuget/UmbracoCms:\u003c 8.9.2.

GHSA-936x-wgqv-hhgqMediumCVSS 6.5

Authenticated path traversal in Umbraco CMS

Vendor

GitHub Security Advisories

Published

April 13, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-5811 →

📋 Description

An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in arbitrary files being written outside of the site home and expected paths when installing an Umbraco package.

🎯 Affected products1

nuget/UmbracoCms:< 8.9.2

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2020-5811
https://www.tenable.com/security/research/tra-2020-59
http://packetstormsecurity.com/files/163965/Umbraco-CMS-8.9.1-Traversal-Arbitrary-File-Write.html
https://github.com/advisories/GHSA-936x-wgqv-hhgq