An issue in the MVC Device Simulator of Sitecore...
High severity
Unreviewed
Published
Jun 6, 2023
to the GitHub Advisory Database
•
Updated Apr 4, 2024
Description
Published by the National Vulnerability Database
Jun 6, 2023
Published to the GitHub Advisory Database
Jun 6, 2023
Last updated
Apr 4, 2024
An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules.
References