writeups.xyz / Bypass IIS Authorisation with this One Weird Trick - Three RCEs and Two Auth Bypasses in Sitecore 9.3

Submitter : c2a

Date: 10 May 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Authorization Bypass
• Security Code Review

Programs :

• Sitecore

Authors :

• Dylan Pindur

Link :
https://blog.assetnote.io/2023/05/10/sitecore-round-two/