Description
Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 5 repositories
-
aalexpereira/CVE-2023-35813 ★ 8 · Dec 31, 2023
Exploit for CVE-2023-35813 POC
-
BagheeraAltered/CVE-2023-35813-PoC ★ 6 · Jan 15, 2024
An exploit for the Sitecore Remote Code Execution Vulnerability
-
her3ticAVI/CVE-2023-35813 ★ 3 · Nov 11, 2025
CVE-2023-35813 is a proof-of-concept used to determine if an instance of Sitecore is vulnerable by analyzing a server Response Header for modification.
-
nmlz/CVE-2023-35813_PoC ★ 0 · May 27, 2026
-
Rezy-Dev/CVE-2023-35813 ★ 0 · Nov 30, 2025
Exploit CVE-2023-35813 PoC Script
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Sitecore - Remote Code Execution http/cves/2023/CVE-2023-35813.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.