CVE-2020-9471

Critical 8.8

Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.

Published March 17, 2020.