CVE-2012-10054

Katalog CVE

CVSS 9.8 · Critical EPSS 4,0%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada umbraco cms. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes a SaveDLRScript operation that permits arbitrary file uploads without authentication. By exploiting a path traversal flaw in the fileName parameter, attackers can write malicious ASPX scripts directly into the web-accessible /umbraco/ directory and execute them remotely.

Rincian

Terbit di NVD

13 Agustus 2025

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

4,0% peluang dieksploitasi; lebih tinggi dari 90,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://web.archive.org/web/20111017174609/http://umbraco.codeplex.com/releases/view/73692 patch · advisory pihak ketiga
• https://web.archive.org/web/20120707033729/http://blog.gdssecurity.com/labs/2012/7/3/find-bugs-faster-with-a-w... patch
• https://www.vulncheck.com/advisories/umbraco-cms-rce advisory pihak ketiga
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/umbraco_upl... exploit
• https://www.exploit-db.com/exploits/19671 exploit
• https://github.com/umbraco/Umbraco-CMS product