CVE-2023-26262

Summary

An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted language file upload vulnerability exists the can lead to direct code execution on the content management (CM) server.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.sitecore.com/trust
• https://github.com/istern/CVE-2023-26262

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://www.sitecore.com/trust
• https://github.com/istern/CVE-2023-26262

• ←Previous
• Next→