CVE:CVE-2023-35813
CNNVD:CNNVD-202306-1348
Sitecore是丹麦Sitecore公司的一套在线营销内容管理系统（CMS）。该系统支持内容编辑、多种语言、多网站部署、数字资产管理等。
Sitecore Experience Manager、Experience Platform 、 Experience Commerce 9.0 到 10.3版本存在安全漏洞。攻击者利用该漏洞可以远程执行代码。
solution:Upgrade sitecore experience_commerce to a higher version than 10.3,and avoid the version [8.2,10.3]; Upgrade sitecore experience_manager to a higher version than 10.3,and avoid the version [8.2,10.3]; Upgrade sitecore experience_platform to a higher version than 10.3,and avoid the version [8.2,10.3]; Upgrade sitecore managed_cloud to a higher version than 10.3,and avoid the version [8.2,10.3]