Unrated

The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Ro...

CVE-2019-12440 First seen on SecPulse May 30, 2019

Original description The description as published by the source.

The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
patch github.com
patch kb.sitecore.net

Key facts

Severity: Unrated
Published: May 30, 2019
First seen on SecPulse: May 30, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52