CVE-2023-27068

Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote attackers to run arbitrary code via ValidationResult.aspx...

CVE-2023-27068

Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote attackers to run arbitrary code via ValidationResult.aspx...

CVE-2023-27068

CVE-2023-27068 affects Sitecore Experience Platform (XP) up to and including version 10.2. The issue is a deserialization of untrusted data via ValidationResult.aspx that enables remote code execution. Remediation: upgrade to Sitecore XP 10.2 or later (per PT-2023-20930). No exploitation details ...