EUVD-2019-4049

Malware in sbrugna...

CVE-2019-12440

The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service...

CVE-2019-12440

The Sitecore Rocks plugin for Sitecore is affected (pre-2.1.149). An unauthenticated attacker can inject malicious commands and code via the Sitecore Rocks Hard Rocks Service, potentially compromising the host. References indicate the fix is in version 2.1.149 (release notes). No additional explo...

CVE-2019-12440

The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service...