HIGH8.8
GHSA-h68c-4jh3-cp9j
Umbraco CMS Authenticated File Upload
Details
Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.
Are you affected?
Enter the version of the package you're using.
Affected packages
NuGet/UmbracoCMS.Core
Introduced in:
0No fixed version published yet for UmbracoCMS.Core (nuget). Pin to a known-safe version or switch to an alternative.