writeups.xyz / Sitecore Experience Platform Pre-Auth RCE - CVE-2021-42237

Submitter : c2a

Date: 1 November 2021

Bounty : undisclosed

Vulnerabilities :

• RCE
• Insecure Deserialization
• Security Code Review

Programs :

• Sitecore

Authors :

• Shubham Shah (@Infosec_au)

Link :
https://blog.assetnote.io/2021/11/02/sitecore-rce/