Lucene search
HistoryMay 22, 2023 - 7:15 p.m.
CVE-2023-27067
cve-2023-27067
directory traversal
sitecore experience platform
nvd
vulnerability
security
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.6 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.8%
Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via crafted command to download.aspx
Affected configurations
Node
sitecoreexperience_platformRange≤10.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| sitecore:experience_platform | sitecore experience platform | le | 10.2 |
Related
prion
prion
Directory traversal
2023-05-22 19:15:00
nvd
nvd
CVE-2023-27067
2023-05-22 19:15:09
cvelist
cvelist
CVE-2023-27067
2023-05-22 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.6 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.8%
Related for CVE-2023-27067