CVE-2023-35813: Code Injection
First published: Sat Jun 17 2023(Updated: )
Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sitecore | >=8.2<=10.3 | |
| Sitecore CMS and Experience Platform (XP) | >=8.2<=10.3 | |
| Sitecore | >=8.2<=10.3 | |
| Sitecore | >=8.2<=10.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-35813?
CVE-2023-35813 is a vulnerability that allows remote code execution in multiple Sitecore products, including Experience Manager, Experience Platform, and Experience Commerce.
Which Sitecore products are affected by CVE-2023-35813?
Multiple Sitecore products are affected by CVE-2023-35813, including Experience Manager, Experience Platform, and Experience Commerce.
What is the severity of CVE-2023-35813?
CVE-2023-35813 has a severity rating of 9.8 out of 10, making it critical.
How can I fix CVE-2023-35813?
To fix CVE-2023-35813, you should apply the necessary security patches provided by Sitecore. It is also recommended to follow any additional mitigation steps mentioned in their security advisory.
Where can I find more information about CVE-2023-35813?
You can find more information about CVE-2023-35813 in Sitecore's knowledge base article: [Sitecore Knowledge Base](https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1002979).
- agent/type
- agent/references
- agent/remedy
- agent/severity
- agent/first-publish-date
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/sitecore
- canonical/sitecore
- version/sitecore/8.2
- version/sitecore/10.3
- canonical/sitecore cms and experience platform (xp)
- version/sitecore cms and experience platform (xp)/8.2
- version/sitecore cms and experience platform (xp)/10.3