CVE-2023-26262

2023-03-1400:00:00

mitre

www.cve.org

sitecore

vulnerability

language file upload

direct code execution

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

45.1%

JSON

An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted language file upload vulnerability exists the can lead to direct code execution on the content management (CM) server.

References

github.com/istern/CVE-2023-26262

www.sitecore.com/trust