Sitecore Cms vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Sitecore Cms: 2 record(s), with affected versions and fixes.cpe:2.3:a:sitecore:cms
CVE-2019-9874
Critical · 9.8
KEV High · 67 Public exploit CWE-502 May 31, 2019
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter __CSRFTOKEN.
CVE-2019-9875
High · 8.8
KEV High · 55 CWE-502 May 31, 2019
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in an HTTP POST parameter.