PT-2023-24434
CVE-2023-33653
·
تاريخ النشر
2023-06-06
·
تاريخ التحديث
2025-01-08
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Sitecore Experience Platform (XP) version 9.3
Description
The issue is related to an authenticated remote code execution via the /Applications/Content Manager/Execute.aspx component, specifically when the
cmd parameter is set to convert and the mode parameter is set to HTML.Recommendations
For Sitecore Experience Platform (XP) version 9.3, consider restricting access to the /Applications/Content Manager/Execute.aspx endpoint to minimize the risk of exploitation. Avoid using the
cmd parameter with the convert value and the mode parameter with the HTML value in the Execute.aspx endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾