Vulnerabilidades do Sitecore Cms
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Sitecore Cms: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:sitecore:cms
CVE-2019-9874
Crítica · 9.8
KEV Alta · 67 Exploit público CWE-502 31/05/2019
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter __CSRFTOKEN.
CVE-2019-9875
Alta · 8.8
KEV Alta · 55 CWE-502 31/05/2019
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in an HTTP POST parameter.