{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-34510", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2025-04-15T19:15:22.612Z", "datePublished": "2025-06-17T18:46:04.239Z", "dateUpdated": "2025-06-26T19:26:12.608Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Experience Manager", "vendor": "Sitecore", "versions": [{"lessThanOrEqual": "9.3", "status": "affected", "version": "9.0", "versionType": "custom"}, {"lessThanOrEqual": "10.4", "status": "affected", "version": "10.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Experience Platform", "vendor": "Sitecore", "versions": [{"lessThanOrEqual": "9.3", "status": "affected", "version": "9.0", "versionType": "custom"}, {"lessThanOrEqual": "10.4", "status": "affected", "version": "10.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Experience Commerce", "vendor": "Sitecore", "versions": [{"lessThanOrEqual": "9.3", "status": "affected", "version": "9.0", "versionType": "custom"}, {"lessThanOrEqual": "10.4", "status": "affected", "version": "10.0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Piotr Bazydlo of watchTowr"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A remote, authenticated attacker can exploit this issue by sending a crafted HTTP request to upload a ZIP archive containing path traversal sequences, allowing arbitrary file writes and leading to code execution."}], "value": "Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A remote, authenticated attacker can exploit this issue by sending a crafted HTTP request to upload a ZIP archive containing path traversal sequences, allowing arbitrary file writes and leading to code execution."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-23", "description": "CWE-23: Relative Path Traversal", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2025-06-17T19:07:50.830Z"}, "references": [{"tags": ["third-party-advisory", "exploit", "technical-description"], "url": "https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/"}, {"tags": ["vendor-advisory"], "url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Apply the vendor provided hotpatch."}], "value": "Apply the vendor provided hotpatch."}], "source": {"discovery": "EXTERNAL"}, "title": "Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-06-18T03:56:12.568004Z", "id": "CVE-2025-34510", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-26T19:26:12.608Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-34510", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-06-18T03:56:12.568004Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-17T20:30:44.355Z"}}], "cna": {"title": "Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Piotr Bazydlo of watchTowr"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Sitecore", "product": "Experience Manager", "versions": [{"status": "affected", "version": "9.0", "versionType": "custom", "lessThanOrEqual": "9.3"}, {"status": "affected", "version": "10.0", "versionType": "custom", "lessThanOrEqual": "10.4"}], "defaultStatus": "unaffected"}, {"vendor": "Sitecore", "product": "Experience Platform", "versions": [{"status": "affected", "version": "9.0", "versionType": "custom", "lessThanOrEqual": "9.3"}, {"status": "affected", "version": "10.0", "versionType": "custom", "lessThanOrEqual": "10.4"}], "defaultStatus": "unaffected"}, {"vendor": "Sitecore", "product": "Experience Commerce", "versions": [{"status": "affected", "version": "9.0", "versionType": "custom", "lessThanOrEqual": "9.3"}, {"status": "affected", "version": "10.0", "versionType": "custom", "lessThanOrEqual": "10.4"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Apply the vendor provided hotpatch.", "supportingMedia": [{"type": "text/html", "value": "Apply the vendor provided hotpatch.", "base64": false}]}], "references": [{"url": "https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/", "tags": ["third-party-advisory", "exploit", "technical-description"]}, {"url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A remote, authenticated attacker can exploit this issue by sending a crafted HTTP request to upload a ZIP archive containing path traversal sequences, allowing arbitrary file writes and leading to code execution.", "supportingMedia": [{"type": "text/html", "value": "Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A remote, authenticated attacker can exploit this issue by sending a crafted HTTP request to upload a ZIP archive containing path traversal sequences, allowing arbitrary file writes and leading to code execution.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-23", "description": "CWE-23: Relative Path Traversal"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2025-06-17T19:07:50.830Z"}}}, "cveMetadata": {"cveId": "CVE-2025-34510", "state": "PUBLISHED", "dateUpdated": "2025-06-26T19:26:12.608Z", "dateReserved": "2025-04-15T19:15:22.612Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2025-06-17T18:46:04.239Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*", "matchCriteriaId": "DCF77DC5-9DF9-4DF7-9636-69CA4BEEDB04", "versionEndIncluding": "10.4", "versionStartIncluding": "9.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "17EF29D0-E1DA-4F84-95F4-EA9680EB47DF", "versionEndIncluding": "10.4", "versionStartIncluding": "9.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*", "matchCriteriaId": "88455751-A525-4A59-9DD8-4E015CD1346C", "versionEndExcluding": "10.4", "versionStartIncluding": "9.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:sitecore:experience_platform:10.4:-:*:*:*:*:*:*", "matchCriteriaId": "78E71AD1-04C7-4D80-9A0A-E386A3FAC860", "vulnerable": true}, {"criteria": "cpe:2.3:a:sitecore:managed_cloud:-:*:*:*:*:*:*:*", "matchCriteriaId": "520CF670-01A2-479F-B637-C413A82463E0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A remote, authenticated attacker can exploit this issue by sending a crafted HTTP request to upload a ZIP archive containing path traversal sequences, allowing arbitrary file writes and leading to code execution."}, {"lang": "es", "value": "Las versiones 9.0 a 9.3 y 10.0 a 10.4 de Sitecore Experience Manager (XM), Experience Platform (XP) y Experience Commerce (XC) se ven afectadas por una vulnerabilidad de Zip Slip. Un atacante remoto autenticado puede explotar este problema enviando una solicitud HTTP manipulada para cargar un archivo ZIP que contenga secuencias de path traversal, lo que permite escrituras arbitrarias en archivos y provoca la ejecuci\u00f3n de c\u00f3digo."}], "id": "CVE-2025-34510", "lastModified": "2025-09-08T19:22:24.210", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "disclosure@vulncheck.com", "type": "Secondary"}]}, "published": "2025-06-17T19:15:31.557", "references": [{"source": "disclosure@vulncheck.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/"}, {"source": "disclosure@vulncheck.com", "tags": ["Vendor Advisory"], "url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-23"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{}