CVE-2025-34510 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Sl…
High CVSS: 8.8

CVE-2025-34510

Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A remote, authenticated attacker can exploit this issue by sending a crafted HTTP request to upload a ZIP archive containing path traversal sequences, allowing arbitrary file writes and leading to code execution.
Vendor
Sitecore
Product
Experience Commerce
CWE
CWE-23
Yayın Tarihi
2025-06-17 19:15:31
Güncelleme
2025-09-08 19:22:24
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-23 Experience Commerce HIGH Sitecore 2025

Referanslar

https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/ https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667