medium6.5
CVE-2023-27066
Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attackers to download arbitrary files via Urlha…
Impact
Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attackers to download arbitrary files via Urlhandle.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sitecore | Experience Platform | through 10.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blogs.night-wolf.io/0-day-vulnerabilities-at-sitecore-pagedesigner
- https://dev.sitecore.net/Downloads/Sitecore%20Experience%20Platform/103/Sitecore%20Experience%20Platform%20103/Release%20Notes
- https://blogs.night-wolf.io/0-day-vulnerabilities-at-sitecore-pagedesigner
- https://dev.sitecore.net/Downloads/Sitecore%20Experience%20Platform/103/Sitecore%20Experience%20Platform%20103/Release%20Notes