CVE-2017-5966

PoC —

CVSS 3.0

4.9 medium

EPSS

2%p74

Published

May 23, 2017 (May 23, 2017)

Modified

Jun 17, 2026

Description

Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack on sitecore/shell/download.aspx with the file parameter.

Vendors: sitecore
Products: crm
Weakness: CWE-22
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.