high7.5
CVE-2023-27067
Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via crafted command to downl…
Impact
Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via crafted command to download.aspx
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sitecore | Experience Platform | through 10.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blogs.night-wolf.io/0-day-vulnerabilities-at-sitecore-pagedesigner
- https://dev.sitecore.net/Downloads/Sitecore%20Experience%20Platform/103/Sitecore%20Experience%20Platform%20103/Release%20Notes
- https://blogs.night-wolf.io/0-day-vulnerabilities-at-sitecore-pagedesigner
- https://dev.sitecore.net/Downloads/Sitecore%20Experience%20Platform/103/Sitecore%20Experience%20Platform%20103/Release%20Notes