Files
CVEs-PoC/2019/CVE-2019-9875.md
2025-09-29 21:09:30 +02:00

701 B

CVE-2019-9875

Description

Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in an HTTP POST parameter.

POC

Reference

No PoCs from references.

Github