Description
Due to the exposed TemplateParser in the Sitecore site, an attacker can create a specially crafted HTTP request and get full access to the system.
Remediation
Upgrade to the latest version of Sitecore
References
Security Bulletin SC2023-002-576660
Exploiting ASP.NET TemplateParser — Part I: Sitecore (CVE-2023-35813)
Related Vulnerabilities
Zikula Cryptographic Issues Vulnerability (CVE-2010-4728)
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2107)
Magento Cleartext Storage of Sensitive Information Vulnerability (CVE-2019-8118)
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-45149)