Approved changes feed: RSS · Atom

cpe:2.3:a:umbraco:umbraco_cms:8.5.3:*:*:*:*:*:*:*

part: a version: 8.5.3 update: *

VendorUmbraco (89be0333-81fe-5eb9-9281-55a77e50e27f)
ProductUmbraco Cms (8f213959-af43-58a2-84af-fba3fcb81e76)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/umbraco/umbraco-cms purl2cpe 2026-06-01 10:16:10.008067
pkg:nuget/UmbracoCms.Core purl2cpe 2026-06-01 10:16:10.008070
pkg:nuget/UmbracoCms.Web purl2cpe 2026-06-01 10:16:10.008072
pkg:nuget/umbracoCms purl2cpe 2026-06-01 10:16:10.008069
pkg:sourceforge/umbraco purl2cpe 2026-06-01 10:16:10.008073

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9472 vulnerable 2026-06-08 05:28:01.793755 Details available
Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality.
Published: 2020-03-16T19:47:06.000Z
Updated: 2024-08-04T10:26:16.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9471 vulnerable 2026-06-08 05:28:01.793360 Details available
Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.
Published: 2020-03-16T19:44:06.000Z
Updated: 2024-08-04T10:26:16.193Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.