CVE-2023-49089

CVSS V2 None CVSS V3 None

Description

Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.0, Backoffice users with permissions to create packages can use path traversal and thereby write outside of the expected location. Versions 8.18.10, 10.8.1, and 12.3.0 contain a patch for this issue.

Overview

CVE ID
CVE-2023-49089

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2023-12-12T19:02:33.259Z

Last Modified Date
2023-12-12T19:02:33.259Z

Weakness Enumerations

CWE	URL
CWE-22	http://cwe.mitre.org/data/definitions/22.html

References

Reference URL	Reference Tags
https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-6324-52pr-h4p5	x_refsource_CONFIRM

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-49089
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49089

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 13:02:13				Added to TrackCVE