CVE-2021-42237

Sitecore XP Remote Command Execution Vulnerability

Experience Platform

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability.

5. Nov 2021

Ausgewertete Quellen

• Hersteller
  https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1000776
• Hinweis
  http://packetstormsecurity.com/files/164988/Sitecore-Experience-Platform-XP-Remote-Code-Execution.html
• Hinweis
  https://blog.assetnote.io/2021/11/02/sitecore-rce/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42237
• CISA
  Sitecore XP Remote Command Execution Vulnerability
• NVD
  CVE-2021-42237