CVE-2023-27066

creationtimestamp| type| source ---|---|--- 2023-05-22 20:25:35+00:00| seen| https://t.me/cibsecurity/64547 2025-02-01 17:28:09+00:00| seen| Telegram/qKzBtc3ZVW8xMVM3kvtjKPTfFnzIgXlBCkSrxsmXHa9mXJ1...

CVE-2023-27066

CVE-2023-27066 affects Sitecore Experience Platform versions 10.2 and earlier. A directory traversal vulnerability allows authenticated remote attackers (low privileges) to download arbitrary files via Urlhandle. Base CVSS v3.1: 6.5 (MEDIUM); attack vector NETWORK, authentication required LOW, pa...