CVE-2023-27068

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p77

Published

May 23, 2023 (May 23, 2023)

Modified

Jun 17, 2026

Description

Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote attackers to run arbitrary code via ValidationResult.aspx.

Vendors: sitecore
Products: experience platform
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.