CVE-2012-10054 Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE
Unauthenticated attackers can upload malicious ASPX scripts via path traversal in the codeEditorSave.asmx endpoint to achieve remote code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-10054?
CVE-2012-10054 is a critical vulnerability in Umbraco Umbraco Cms, published on 13 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes a SaveDLRScript operation that permits arbitrary file uploads without authentication. By exploiting a path traversal flaw in the fileName parameter, attackers can write malicious ASPX scripts directly into the web-accessible /umbraco/ directory and execute them remotely.
Which versions are affected by CVE-2012-10054?
It affects 1 product.
Products include Umbraco Umbraco Cms.
How do I fix CVE-2012-10054?
No fix has been published for CVE-2012-10054 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-10054 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2012-10054 exists.
Public exploit code: 1 Metasploit module.
Other vulnerabilities in Umbraco Umbraco Cms
- CVE-2025-67288 Umbraco CMS has an arbitrary file upload vulnerability
- CVE-2014-10074 File upload in n/a
- CVE-2012-1301 Server-side request forgery in n/a
- CVE-2025-32017 Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users
- CVE-2020-9471 Umbraco CMS Authenticated File Upload
Sources
Also known as GHSA-c8gg-qc8v-6jfx.