CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-05-31
Sitecore CMS Anti-CSRF Module Deserialization Remote Code Execution (RCE) Vulnerability (CVE-2019-9875)
[Affected Scope] Sitecore CMS through version 9.1
[Impact] An authenticated attacker can execute arbitrary code on the target server by sending a serialized .NET object in an HTTP POST parameter.
[Mitigation] Apply the official security patches from Sitecore or disable/update the vulnerable anti-CSRF module configuration.