What is GHSA-h68c-4jh3-cp9j?

GHSA-h68c-4jh3-cp9j is a security advisory published by GitHub Security Advisories with High severity. Umbraco CMS Authenticated File Upload

Which CVE IDs does GHSA-h68c-4jh3-cp9j cover?

GHSA-h68c-4jh3-cp9j covers the following CVE IDs: CVE-2020-9471. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h68c-4jh3-cp9j?

GHSA-h68c-4jh3-cp9j has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-h68c-4jh3-cp9j?

GHSA-h68c-4jh3-cp9j affects 1 product, including: nuget/UmbracoCMS.Core:\u003c= 8.5.3.

GHSA-h68c-4jh3-cp9jHighCVSS 8.8

Umbraco CMS Authenticated File Upload

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 13, 2023

🔗 CVE IDs covered (1)

CVE-2020-9471 →

📋 Description

Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.

🎯 Affected products1

nuget/UmbracoCMS.Core:<= 8.5.3

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2020-9471
https://gitlab.com/eLeN3Re/cve-2020-9471
https://gitlab.com/eLeN3Re/cve-2020-9472/-/blob/master/CVE-2020-9472.pdf
https://github.com/advisories/GHSA-h68c-4jh3-cp9j