Description
Due to the exposed TemplateParser in the Sitecore site, an attacker can create a specially crafted HTTP request and get full access to the system.
Remediation
Upgrade to the latest version of Sitecore
References
Security Bulletin SC2023-002-576660
Exploiting ASP.NET TemplateParser — Part I: Sitecore (CVE-2023-35813)
Related Vulnerabilities
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-3171)
Microsoft SQL Server Other Vulnerability (CVE-2002-1137)
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-3325)
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3093)