CISA Adds Sitecore CMS Code Execution Vulnerability to Exploited List
Posted: Sun Mar 30, 2025 6:24 am
The Cybersecurity and Infrastructure Security Agency (CISA) has included a critical deserialization vulnerability affecting Sitecore CMS and Experience Platform (XP).
This vulnerability, tracked as CVE-2019-9874, allows unauthenticated attackers to execute arbitrary code by manipulating HTTP POST parameters, specifically the __CSRFTOKEN field.
https://gbhackers.com/sitecore-cms-code ... erability/
This vulnerability, tracked as CVE-2019-9874, allows unauthenticated attackers to execute arbitrary code by manipulating HTTP POST parameters, specifically the __CSRFTOKEN field.
https://gbhackers.com/sitecore-cms-code ... erability/