exploitDog

CVE-2023-26262

Опубликовано: 14 мар. 2023

Источник: nvd

CVSS3: 7.2

EPSS Средний

Описание

An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted language file upload vulnerability exists the can lead to direct code execution on the content management (CM) server.

Ссылки

https://github.com/istern/CVE-2023-26262
Exploit
Mitigation
Third Party Advisory
https://www.sitecore.com/trust
Vendor Advisory
https://github.com/istern/CVE-2023-26262
Exploit
Mitigation
Third Party Advisory
https://www.sitecore.com/trust
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*

Версия до 10.3 (включая)

cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*

Версия до 10.3 (исключая)

EPSS

Процентиль: 93%

0.10965

Средний

7.2 High

CVSS3

Дефекты

CWE-434

CWE-434

Связанные уязвимости

GHSA-pq46-vx2x-6fxf

CVSS3: 8.8

github

почти 3 года назад

An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted language file upload vulnerability exists the can lead to direct code execution on the content management (CM) server.

EPSS

Процентиль: 93%

0.10965

Средний

7.2 High

CVSS3

Дефекты

CWE-434

CWE-434