PT-2020-20684 · Umbraco · Umbraco Cms+1

Published 2020-03-16 · Updated 2022-05-24 · CVE-2020-9472

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Umbraco CMS version 8.5.3 Umbraco Cloud version 8.5.3

Description The issue allows an authenticated file upload, which can lead to Remote Code Execution, via the Install Package or Install Packages functionality.

Recommendations For Umbraco CMS version 8.5.3, consider disabling the Install Package functionality until a patch is available. For Umbraco Cloud version 8.5.3, restrict access to the Install Packages functionality to minimize the risk of exploitation.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-9472

GHSA-H68C-4JH3-CP9J

GHSA-J66F-H9HM-975M

Affected Products

Umbraco Cms

Umbraco Cloud

References · 10

• 🔥 https://gitlab.com/eLeN3Re/cve-2020-9472 · Exploit
• https://osv.dev/vulnerability/CVE-2020-9472 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-j66f-h9hm-975m · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9472 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-9471 · Security Note
• https://osv.dev/vulnerability/GHSA-h68c-4jh3-cp9j · Vendor Advisory
• https://github.com/umbraco/Umbraco-CMS · Note
• https://gitlab.com/eLeN3Re/cve-2020-9471 · Note
• https://gitlab.com/eLeN3Re/cve-2020-9472/-/blob/master/CVE-2020-9472.pdf · Note
• https://t.me/cvenotify/1785 · Telegram Post