All vulnerabilities

Servers and applications

CVE-2020-9471

Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.

Severity
High 8.8
Published
16 Mar 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Umbraco CMSServers and applications · cpe:a:umbraco:umbraco_cms
  • Version 8.5.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-9471
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-9471