CVE-2023-27067

Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via crafted command to download.aspx...

CVE-2023-27067

Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via crafted command to download.aspx...

CVE-2023-27067

Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via crafted command to download.aspx...

CVE-2023-27067

Sitecore Experience Platform (Sitecore XP) versions prior to 10.2 are affected by CVE-2023-27067. The vulnerability is a directory traversal in the download.aspx endpoint that could allow remote attackers to download arbitrary files. Impact is high on confidentiality (C:H) with no integrity or av...