CVE-2023-27067: Sitecore Experience Platform

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via crafted command to download.aspx

Affected products

• Sitecore Experience Platform: up to and including 10.2

Published 2023-05-22. Last modified 2026-06-17.