Directory Traversal Vulnerability in Sitecore Experience Platform

CVE-2023-27067

What is CVE-2023-27067?

A directory traversal vulnerability exists in the Sitecore Experience Platform, allowing remote attackers to exploit misconfigurations through specially crafted requests targeting the download.aspx endpoint. This weakness enables malicious users to access and download arbitrary files from the server, potentially exposing sensitive information and compromising the integrity of the web application. Users are highly urged to apply security patches and regularly audit their systems to prevent exploitation.

References