CVE-2020-9472: Malicious File Upload

Published Mar 16, 2020

Updated

Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality.

Affected Software

1 affected component

Umbraco Umbraco CMS=8.5.3

Event History

Mar 16, 2020

CVE Published

via MITRE·07:47 PM

Data Sourced

via MITRE·07:47 PM

Description

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2020-9472?

CVE-2020-9472 is a vulnerability in Umbraco CMS 8.5.3 that allows an authenticated attacker to upload malicious files, leading to remote code execution.

How severe is CVE-2020-9472?

CVE-2020-9472 has a severity rating of 6.5 out of 10, which is considered medium.

How does CVE-2020-9472 work?

CVE-2020-9472 allows an authenticated attacker to upload malicious files via the Install Package functionality in Umbraco CMS 8.5.3, which can lead to remote code execution.

Is Umbraco CMS 8.5.3 the only version affected by CVE-2020-9472?

Yes, CVE-2020-9472 specifically affects Umbraco CMS version 8.5.3.

How can I fix CVE-2020-9472?

To fix CVE-2020-9472, it is recommended to upgrade Umbraco CMS to a version that has addressed the vulnerability or apply any available patches or security updates provided by the vendor.