Description (CNA)
An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in arbitrary files being written outside of the site home and expected paths when installing an Umbraco package.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Umbraco CMS | affected <= 8.9.1 or current (unfixed) |
CWE
No CWE identifiers supplied.
References
- https://www.tenable.com/security/research/tra-2020-59
- http://packetstormsecurity.com/files/163965/Umbraco-CMS-8.9.1-Traversal-Arbitrary-File-Write.html
ADP enrichment
No English description supplied.