The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Ro...

参照URL

• advisory github.com
• patch github.com
• patch kb.sitecore.net