Medium severity4.9NVD Advisory· Published Jul 19, 2017· Updated May 13, 2026
CVE-2017-11440
CVE-2017-11440
Description
In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- packetstormsecurity.com/files/143357/Sitecore-CMS-8.2-Cross-Site-Scripting-File-Disclosure.htmlnvdExploitThird Party AdvisoryVDB Entry
- xc0re.net/2017/07/03/sitecore-cms-v-8-2-multiple-vulnerabilties/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.