CVE:CVE-2023-33651
CNNVD:CNNVD-202306-396
Sitecore Experience Platform（XP）是丹麦Sitecore公司的一套客户数字体验平台。
Sitecore Experience Platform (XP存在安全漏洞，该漏洞源于MVC Device Simulator存在安全问题，允许攻击者绕过授权规则。受影响的产品和版本：Sitecore Experience Platform (XP), Experience Manager (XM), Experience Commerce (XC) 9.0 Initial Release至13.0 Initial Release版本。
solution:Upgrade sitecore experience_commerce to a higher version than 10.3,and avoid the version [9.0,10.3]; Upgrade sitecore experience_manager to a higher version than 10.3,and avoid the version [9.0,10.3]; Upgrade sitecore experience_platform to a higher version than 10.3,and avoid the version [9.0,10.3]; Upgrade sitecore managed_cloud to a higher version than -