SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  Sitecore CMS Remote Command Execution

Category: WEB-ATTACKS      

Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF module that allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter __CSRFTOKEN.


Relevant Information