critical9.8
CVE-2023-27068
Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote attackers to run arbitrary code via ValidationResult.aspx.
Impact
Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote attackers to run arbitrary code via ValidationResult.aspx.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sitecore | Experience Platform | before 10.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blogs.night-wolf.io/0-day-vulnerabilities-at-sitecore-pagedesigner
- https://dev.sitecore.net/Downloads/Sitecore%20Experience%20Platform/103/Sitecore%20Experience%20Platform%20103/Release%20Notes
- https://www.sitecore.com/products/sitecore-experience-platform
- https://blogs.night-wolf.io/0-day-vulnerabilities-at-sitecore-pagedesigner
- https://dev.sitecore.net/Downloads/Sitecore%20Experience%20Platform/103/Sitecore%20Experience%20Platform%20103/Release%20Notes
- https://www.sitecore.com/products/sitecore-experience-platform