medium4.9
CVE-2017-11440
In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference paramete…
Impact
In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sitecore | Cms | Version 8.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://packetstormsecurity.com/files/143357/Sitecore-CMS-8.2-Cross-Site-Scripting-File-Disclosure.html
- https://xc0re.net/2017/07/03/sitecore-cms-v-8-2-multiple-vulnerabilties/
- https://packetstormsecurity.com/files/143357/Sitecore-CMS-8.2-Cross-Site-Scripting-File-Disclosure.html
- https://xc0re.net/2017/07/03/sitecore-cms-v-8-2-multiple-vulnerabilties/