8.8Alta
CVE-2025-34511Sitecore PowerShell Extension RCE via Unrestricted Upload
Descripción
Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experience Platform (XP), through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remote code execution.
Debilidad (CWE):
CWE-434
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| sitecore | experience commerce | 9.0 – ≤ 10.4 | |
| sitecore | experience manager | 9.0 – ≤ 10.4 | |
| sitecore | experience platform | 0 – ≤ 7.0 | |
| sitecore | managed cloud | — | |
| Sitecore | Powershell Extension | ≤ 7.0 |
Referencias y parches
- https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/ third-party-advisoryexploittechnical-descriptionExploit
- https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667 vendor-advisoryVendor Advisory
Coincidencias CPE (NVD) (5)
cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*≥ 9.0 ≤ 10.4cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*≥ 9.0 ≤ 10.4cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*≥ 9.0 < 10.4cpe:2.3:a:sitecore:experience_platform:10.4:-:*:*:*:*:*:*cpe:2.3:a:sitecore:managed_cloud:-:*:*:*:*:*:*:*