Описание
An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in arbitrary files being written outside of the site home and expected paths when installing an Umbraco package.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 8.9.1 (включая)
cpe:2.3:a:umbraco:umbraco_cms:*:*:*:*:*:*:*:*
EPSS
Процентиль: 88%
0.03593
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
EPSS
Процентиль: 88%
0.03593
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22