Unscored CVE-2019-12440 EUVD-2019-4049GHSA-vp9w-cxrw-6j78

The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the …

Published May 29, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service.

References

https://kb.sitecore.net/articles/842902
https://github.com/Sitecore/Sitecore.Rocks/releases/tag/2.1.149
https://github.com/Sitecore/Sitecore.Rocks/compare/be79dcc...bd9ba6a