Vulnerabilities in Sitecore Experience Platform Allow Remote Code Execution
Security
A chain of vulnerabilities in the Sitecore Experience Platform (XP) allows attackers to execute code remotely (RCE) without authentication, thereby compromising servers. This exploitation chain begins with a hardcoded password 'b'. Attackers can exploit these flaws to take control of servers and perform malicious actions.